Project

General

Profile

Actions
Copy link

Bug #5316

closed

allow smbadm join to use RPC

Added by Gordon Ross over 7 years ago. Updated over 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Gordon Ross
Category:
-
Start date:
2014-11-13
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:
needs-triage
Gerrit CR:

Description

By default, "smbadm join" uses Kerberos, which requires editing /etc/krb5/krb5.conf correctly (among other things). Even when one manages to get that right, the idmap service and the smb service may end up using a different AD server, which can cause problems like stale or missing machine account data.

To get around all of this (at least temporarily) it's often simpler to use RPC-style join, which doesn't have any of those problems.
To use RPC-style join, set this idmap parameter:

  svccfg -s system/idmap setprop config/use_ads = boolean: false

One caveat however: With RPC-style join, idmap does not talk to AD, so IDMU mode is precluded with this configuration.

Actions
Copy link

Also available in: Atom PDF