Azure AD DS, linux, SSSD, SAMBA

[learnazure_ad]

Hello,

Trying to setup a Samba file share on a Linux(centos7) using SSSD and Azure AD DS.

Cannot get this going.  Any ideas or documentation.

I have read that this may not be possible and that I may have to use ldap or secure ldap t authenticate.  Possibly use winbind, I am not sure this is compatible with Azure AD DS.

Any help would be appreciated.

Thank you

[#2]

It's probably a LOT easier to do this with Azure files rather than force Linux to deal with AAD.
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-linux?tabs=smb311 

But if you really want to do it, a few tidbits:

• You have to open port 445, both in the VM definition in Azure and in the Linux box itself. That being said, it's a really really really bad idea to expose that to the open Internet. You should be providing a private VPN into the Azure network and then get to it from there.
• You have to configure secure LDAP (or LDAPS) to accept AAD as an authentication source: Tutorial - Configure LDAPS for Azure Active Directory Domain Services | Microsoft Docs
• Then you have to configure samba to use LDAP: Configuring Samba with LDAP authentication (on Centos/RHEL 7) | Linux/Network administrator's blog (... 

But oh my it is so much easier to use Azure Files for that