FreeBSD 13.1 and SSSD AD or Samba/Winbind AD reddit / freebsd ---------------------------------------------------------------------- MyJewishFuzzyNutz · 2022-07-08 18:30 Hey all, I have followed instructions to compile sssd, mkhomedir, openssh- portable, and cyrus-ldap-gssapi from the ports collection but cannot get joined to the domain. I've tried using Samba/Winbind and net ads join for AD and it works, the problem with that is the uid/gid of my AD users are in the 100s of millions and Samba does an idmap changing the values. I cannot get my AD users assigned the correct ID from Active Directory. I don't care which method I use, but I want to have the same uid/gid as Active Directory to chown files with the correct permissions. The issue after compiling/installing sssd is I cannot "realm join" a domain. I cannot generate the correct krb5.keytab file either b/c there's no kt(whatever) util to output the keytab file but it's in the instructions. This is part of the disconnect. So I cannot start the SSSD service to get AD lookups b/c /usr/local/etc/sssd/sssd.conf cannot read /etc/krb5.keytab and using one from another server gives a "bad address" error. I'm assuming they're specific to each server. So - if there's anyone that's successfully gotten SSSD to work - I'd love to know. \*OR\* If someone has gotten Samba/Winbind and can propagate the correct values from AD to use for POSIX permissions, I'd love to know that also. Also, with winbind, I cannot get the correct ID for any other user than my own. ---------------------------------------------------------------------- hortimech · 2022-07-09 07:24 I am a bit perplexed here, you say 'I want to have the same uid/gid as Active Directory' , but AD doesn't use uid/gid, it uses RID's. You can optionally add uidNumber & gidNumber attributes which Linux can use. I think you need to explain just what you have done. ---------------------------------------------------------------------- teeweehoo · 2022-07-16 01:38 Winbind/Samba does support this natively. (FYI I've never used samba/winbind or sssd on freebsd, just on linux). - https://wiki.samba.org/index.php/Identity_Mapping_Back_Ends - https://wiki.samba.org/index.php/Idmap_config_ad