SAMBA again

Matthew Carpenter matt
Thu Nov 17 22:16:45 PST 2005


On Wednesday 16 November 2005 12:42, Aaron Grewell wrote:
> > # net rpc join -W <domain_name> -U <domain_user_account>
>
> This is the way to do it for NT4 or Samba-based domain controllers.  For
> Active Directory, use net ads join instead.  That way you'll get
> Kerberos security.  I thought Samba By Example covered it pretty well,
> but I've spent quite a bit of time with various Windows flavors so that
> probably means I've made quite a few assumptions about how it should
> work.  In general, it goes like this:
>
> 1) Configure Samba and Winbind in /etc/smb.conf
> 2) Configure Name Service Switch in /etc/nsswitch.conf
> 3) Configure PAM in /etc/pam.d somewhere (depends on the distro)
> 4) Join the domain using the net command.
> 5) Start Winbind
>
> At that point you should be able to login.  I generally leave myself a
> root login on a separate vt during testing just in case I've missed a
> step in the PAM incantation and locked out all logins.  So let's start
> with smb.conf.  What does it look like, and what sort of domain are you
> trying to join?  ADS or NT?

This doesn't take into account any kerberos config.  Are you talking about an 
NT domain or ADS here?  I'm still working on the switch from an NT domain to 
AD, but not ready yet.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.linux-sxs.org/pipermail/linux-users/attachments/20051117/1695a580/attachment.pgp


More information about the Linux-users mailing list