|
My Name
Subscribe
|
Thu, 27 Jan 2005Comment from mmartha
Date: 09/27/2004 01:00PM PDT
Comment
Hi nerak99,
First you add winbind in your nsswitch.conf
passwd: files winbind
group: files winbind
hosts: files dns winbind
Add your realm to kerberos in krb.conf
Authenticate
#kinit user@REALM
Join the domain in Active directory
#net ads join -S DOMAIN -U user%passwd
Join the domain in NT Direcotry
#net rpc join -S DOMAIN -U user%passwd
In smb.conf ¨
Active Directory
[global]
security = ADS
password encrypt = yes
realm = REALM.COM
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
template home = /home/win2k/%D/%U
winbind separator = +
NT directory
[global]
security = DOMAIN
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
template home = /home/win2k/%D/%U
winbind separator = +
Create the home directories
run smb, nmb and winbind
you can probe winbind with
#wbinfo -u
#wbinfo -g
#getent passwd
#getent group
To a local login you need to edit your PAM settings, depend of your system.
In red hat, you need to edit the file system-auth.
In SuSe, login and xdm.
[/Misc] permanent link |
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||