[Pkg-samba-maint] Bug#899269: Bug#899269: Further Info on this bug

[Daniel Lakeland]

On 06/18/2018 01:16 PM, Mathieu Parent wrote:
> Hello,
>
> It looks like the changes for
> https://bugzilla.samba.org/show_bug.cgi?id=13328 broke your setup.
>
> But the following log:
>
>    Failed to fetch domain sid for LAN
>
> (which causes "NT_STATUS_INVALID_PARAMETER_MIX" later).
>
> Do you have this same error with samba 4.7?
>
> Second guess: Is your server memory low?
>
> Regards
>
> Mathieu Parent

In the end, what I wound up doing was setting

security = user

and keeping

kerberos method = secrets and keytab

and let sssd be the back-end to talk to the LDAP directory here. It 
seems to work. right now there's only 4.5.12 and 4.8.2 available to 
install via apt. so I'm not sure if the problem happens in 4.7

server is definitely not low on memory, unless samba is trying to 
allocate more than about 12 gigs of space (current free/cache amount) 
;-) which by itself should be considered a bug

This was never really an active directory install, it's a standard unix 
LDAP + Kerberos install, using sssd to provide unix accounts. Perhaps 
this really should be security = user, but older "howtos" (esp pre-sssd 
days) showed to use ADS and that's what I've been doing for the last say 
3 or 4 years.