samba-ad-dc: are pam/nss-winbind, and winbind itself, needed for AD-DC functionality?

Michael Tokarev via samba <[email protected]> Sun, 8 Mar 2026 13:19:28 +0300
Newsgroups gmane.network.samba.general
Message-ID <[email protected]>
Hi!

Are the mentioned components actually needed on an Active-Directory
Domain Controller?

In Debian Samba packaging, I've made these as dependencies for the samba
domain controller.  But now I wonder if it was the correct decision.

See https://bugs.debian.org/1130068 for a debian bug report about this.

It looks like pam and nss are not needed at all.

As for winbind, apparently it *is* started by samba.  But even there,
I'm not sure it's actually needed for the AD-DC itself - it looks like
I can drop it from `server services` setting.

BTW, where one can find documentation about various server services,
what are they, what they're used for, etc?

Thanks,

/mjt

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba