On 06/18/2018 01:16 PM, Mathieu Parent wrote:
Hello,
It looks like the changes for
https://bugzilla.samba.org/show_bug.cgi?id=13328 broke your setup.
But the following log:
Failed to fetch domain sid for LAN
(which causes "NT_STATUS_INVALID_PARAMETER_MIX" later).
Do you have this same error with samba 4.7?
Second guess: Is your server memory low?
Regards
Mathieu Parent
In the end, what I wound up doing was setting
security = user
and keeping
kerberos method = secrets and keytab
and let sssd be the back-end to talk to the LDAP directory here. It
seems to work. right now there's only 4.5.12 and 4.8.2 available to
install via apt. so I'm not sure if the problem happens in 4.7
server is definitely not low on memory, unless samba is trying to
allocate more than about 12 gigs of space (current free/cache amount)
;-) which by itself should be considered a bug
This was never really an active directory install, it's a standard unix
LDAP + Kerberos install, using sssd to provide unix accounts. Perhaps
this really should be security = user, but older "howtos" (esp pre-sssd
days) showed to use ADS and that's what I've been doing for the last say
3 or 4 years.
