{{tag>Brouillon Samba windows CA}}

= Notes Samba Winbind Kerberos

Voir 
* **sssd**
* nslcd


== Debug 

Check NTP and :
<code bash>

service samba restart
service winbind restart
cat /etc/nsswitch.conf

net ads join --kerberos -U administrator -d 10
</code>

== Pb

Kerberos
<code bash>
net ads info
net ads status
wbinfo -u
wbinfo -g
wbinfo -t
wbinfo -m

kinit administrator at UNILINEDOO.LOCAL
klist -ke
net ads testjoin
id <user>
getent passwd 
getent passwd DOMAIN/user
getent group

klist
kdestroy
</code>

<code bash>
wbinfo -t
</code>

Solution :
* stop smbd, nmbd and winbindd (make sure they are really dead using ps. winbindd still lingered after I stopped the service)
* delete the samba from the PDC (using the Management Console)
* delete the secrets database (/var/lib/samba/secrets.tdb)
* join the domain again
* start the daemons again (smbd, nmbd and winbindd)

Source : https://ubuntuforums.org/showthread.php?t=1857135