{"id":94,"date":"2022-05-18T11:59:01","date_gmt":"2022-05-18T11:59:01","guid":{"rendered":"https:\/\/www.scientiam.org\/?p=94"},"modified":"2022-05-18T12:00:56","modified_gmt":"2022-05-18T12:00:56","slug":"samba-offline-ad-users-fun-with-pinebook-pro","status":"publish","type":"post","link":"https:\/\/www.scientiam.org\/index.php\/2022-05-18\/samba-offline-ad-users-fun-with-pinebook-pro\/","title":{"rendered":"Samba Offline AD Users Fun with Pinebook Pro"},"content":{"rendered":"\n<p>this was done with manjaro xfce.<\/p>\n\n\n\n<p>so i went through the process of connecting to an ad in order to have centralized authentication (among a few other things that may be &#8216;good&#8217; for). but being a laptop i want to make sure that the pinebook pro can still login as an ad user when it isn&#8217;t connected to the same network. this seems to work with the common settings found on samba.org which explains how to configure pam and smb.conf to work this way. <\/p>\n\n\n\n<p>what i noticed though is that when i am off the network there is a long delay when trying to login as a cached ad user. i need to investigate this more but it is incredibly annoying. maybe i might move over to sssd but sssd seems a little underbaked in manjaro\/arch. it is far easier to configure in debian or ubuntu. manjaro stock image repos are also missing realmd which i guess is a thing. i&#8217;ll update here if i find anything that can fix this. <\/p>\n\n\n\n<p>just a note: manjaro instructions are the &#8216;old school&#8217; way of doing it where you need to set up kerberos, samba \/ winbind, and pam in order for it to function. some people said they had success with sssd but i didn&#8217;t bother with it yet since old school method works for fbsd and it is best to keep that fresh.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>this was done with manjaro xfce. so i went through the process of connecting to an ad in order to have centralized authentication (among a few other things that may be &#8216;good&#8217; for). but being a laptop i want to make sure that the pinebook pro can still login as an ad user when it [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-94","post","type-post","status-publish","format-standard","hentry","category-pinebook-pro"],"_links":{"self":[{"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/posts\/94","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/comments?post=94"}],"version-history":[{"count":3,"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/posts\/94\/revisions"}],"predecessor-version":[{"id":97,"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/posts\/94\/revisions\/97"}],"wp:attachment":[{"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/media?parent=94"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/categories?post=94"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.scientiam.org\/index.php\/wp-json\/wp\/v2\/tags?post=94"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}