freeipa

#8452 update samba configuration on IPA master to explicitly use 'server role' setting
Closed: fixed by rcritten. Opened by abbra.

Closed: fixed
Reopen Issue

Samba 4.13 considers to deprecate and future versions would remove domain logons setting in smb.conf. This will affect how smbd considers its configuration for non-AD DC setup (NT4 domains mode) which is used by FreeIPA.

looking at lp_find_server_role() and lp_is_security_and_server_role_valid(), we need to define

 server role = CLASSIC PRIMARY DOMAIN CONTROLLER
 security = user

explicitly. Right now we have

 security = user
 domain master = yes
 domain logons = yes

and no server role, so it defaults to AUTO and will require an update of the configuration to set server role explicitly.

Metadata Update from @abbra:
- Issue set to the milestone: FreeIPA 4.9

PR: https://github.com/freeipa/freeipa/pull/5519

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5519

master:

  • d6ccb9b5b3d7e000e27247479bcb1cc01ce61d93 Update samba configuration on IPA master to explicitly use 'server role' setting

ipa-4-9:

  • 2b64a4e8ad5563030650f6d293d4b0537d72cd2c Update samba configuration on IPA master to explicitly use 'server role' setting

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.