| Summary: | Clarify the scenario in section 4.4. Accessing a CIFS share with SSSD | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Eugene <evgueni.gavrilov> |
| Component: | doc-Windows_Integration_Guide | Assignee: | Aneta Šteflová Petrová <apetrova> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Kaushik Banerjee <kbanerje> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | high | ||
| Version: | 7.3 | CC: | grajaiya, jhrozek, lslebodn, mkosek, mzidek, pbrezina, rhel-docs, sbose |
| Target Milestone: | rc | Keywords: | Documentation |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-08-08 14:04:31 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Eugene
2016-12-02 05:01:55 UTC
There is no package which requires sssd-libwbclient. # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.3 Beta (Maipo) # repoquery --provides sssd-libwbclient sssd-libwbclient = 1.14.0-43.el7 sssd-libwbclient(x86-64) = 1.14.0-43.el7 # repoquery --whatrequires sssd-libwbclient # repoquery --whatrequires 'sssd-libwbclient(x86-64)' So you can just remove it or not install it in the first place. The alternatives settings are chosen in a way that whenever sssd-libwbclient is installed it has a higher priority than Samba's libwbclient. Since no package will pull in sssd-libwbclient automatically it must be installed manually and it should only be installed if it is needed and the feature set it provides is sufficient. HTH bye, Sumit (In reply to Sumit Bose from comment #1) > There is no package which requires sssd-libwbclient. > > # cat /etc/redhat-release > Red Hat Enterprise Linux Server release 7.3 Beta (Maipo) > # repoquery --provides sssd-libwbclient > sssd-libwbclient = 1.14.0-43.el7 > sssd-libwbclient(x86-64) = 1.14.0-43.el7 > # repoquery --whatrequires sssd-libwbclient > # repoquery --whatrequires 'sssd-libwbclient(x86-64)' > > > So you can just remove it or not install it in the first place. > > The alternatives settings are chosen in a way that whenever sssd-libwbclient > is installed it has a higher priority than Samba's libwbclient. Since no > package will pull in sssd-libwbclient automatically it must be installed > manually and it should only be installed if it is needed and the feature set > it provides is sufficient. > > HTH > > bye, > Sumit Hi Sumit, I was just following "Red Hat Enterprise Linux 7 Windows Integration Guide" which states: "Packages Required for Accessing a CIFS Share with SSSD For a client to use SSSD to access a CIFS share, the following two packages are required. sssd-client The sssd-client package is installed automatically as an SSSD dependency. The package ..... sssd-libwbclient The sssd-libwbclient package is not installed automatically" Regards Eugene Hi Eugene, this makes sense, but please note that the guide also says "If you require NTLM authentication or NetBIOS name lookup, use Winbind for accessing a CIFS share instead of SSSD.". SSSD currently only supports Kerberos authentication from Windows clients which is in general available in an AD domain but under certain conditions the Windows clients will fall back to NTLM. Typical reasons for the fallback to NTLM are trying to access the file server with the IP address or with a short (NetBIOS) name instead of the fully-qualified DNS name. Another reason might be that no 'cifs/fully.qualified.name' service principal is created for the file-server. HTH bye, Sumit It looks like the main problem here is that the Windows Integration Guide does not explain all this clearly. Therefore, I'm changing the component to the doc component. We will have a look at the guide and see if we can make any editing changes that would make the situation clearer. I reviewed "Accessing a CIFS share with SSSD" and updated the section to clarify its contents. I've sent the update for peer review. I've implemented feedback from peer review and sent the section for SME review. I'm renaming this BZ to make sure it corresponds to the doc task the original report turned into. We've reviewed the section to make it clearer, covering also the issues from the original report. The new section is named 4.4. Using SMB shares with SSSD and will be available with the next minor release. The update is now available on the Customer Portal. https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/index.html |