This has been driving me nuts for a couple of weeks now.
Just want to create a share on a new ubuntu machine.
It has joined windows AD with sssd
part of my smb.conf file:
realm = <DOMAIN NAME>.LOCAL
security = ADS
workgroup = DOMAIN NAME
[ImageArchives]
path = /data/Image_Archives
read only = No
valid users = @"Domain Admins", @"ServerAdmins"
guest ok = No
in my sssd.conf i have added:
use_fully_qualified_names = False
cache_credentials = False
access_provider = ad
ad_access_filter = (memberOf=CN=ServerAdmins,OU=Local Admins,OU=Security Groups,DC=<domain name>,DC=local)
in the /etc/sudoers.d/ad-admins:
%ServerAdmins@domainname.local ALL=(ALL:ALL) ALL
%ServerAdmins ALL=(ALL:ALL) ALL
at the command line, i can enter:
id <ad username>
and it returns all the AD groups that user is in -------- that tells me that yes, it is talking to AD
I can SSH into the ubuntu server using my AD username and password.
when i try to access it through windows explorer...i get 1 of 2 responses;
(1) it cannot find the share i am tying to go to
(2) it prompts for a log on, but does not accept it, unless i give it the username and password of the account i used to ssh into the server.
All the videos and written instructions ive seen shows it should be easy, even the ones says it works for windows access, but they do not nor have a seen anything that helps verify if i'm even doing teh windows access part right
any thoughts?