Re: winbind offline logon [ERA Re: pam_sss(login:account): Access denied for user]

[Piviul <piviul@riminilug.it>]

On 12/8/23 17:14, Marco Gaiarin wrote:
> Mandi! Piviul
>    In chel di` si favelave...
> > A voi invece va sempre?
> Si. Metti qui un 'testparm' che vediamo.
# Global parameters
[global]
    client ipc min protocol = NT1
    client max protocol = SMB3
    client min protocol = NT1
    lock directory = /var/cache/samba
    log file = /var/log/samba/log.%m
    logging = file
    map to guest = Bad User
    max log size = 1000
    obey pam restrictions = Yes
    pam password change = Yes
    panic action = /usr/share/samba/panic-action %d
    passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
    passwd program = /usr/bin/passwd %u
    realm = AD.CSARICERCHE.COM
    security = ADS
    server role = standalone server
    server string = %h server
    template shell = /bin/bash
    unix password sync = Yes
    winbind enum groups = Yes
    winbind enum users = Yes
    winbind expand groups = 1
    winbind offline logon = Yes
    winbind refresh tickets = Yes
    winbind request timeout = 10
    workgroup = DOMINIOCSA
    idmap config dominiocsa : range = 10000-24999
    idmap config dominiocsa : backend = rid
    idmap config * : range = 3000-9999
    idmap config * : backend = tdb


[homes]
    browseable = No
    comment = Home Directories
    create mask = 0700
    directory mask = 0700


Grazie Marco!

Paolo