Linux join windows domain

Install the following packages with the Synaptic Package Manager.

Samba (version 3):

o samba

o samba-common (installed by default)

o smbclient (installed by default)

o winbind

Kerberos:

o krb5-config

o krb5-user

and any packages that might be needed to meet dependencies.

Edit /etc/samba/smb.conf

—————————————–
[global]
security = ADS
realm = URCOMPANY.LOCAL
workgroup = urcompany
password server = saturn.urcompany.local
wins support = no
wins server = 10.0.10.230
invalid users = root
# Winbind settings
idmap uid = 10000-20000
idmap gid = 10000-20000
# For testing
debuglevel = 2

# A shared folder for testing purposes
[SharedFolder]
path = /home/hani/Shared_Folder
available = yes
public = yes
writable = yes
force create mode = 0666
force directory mode = 0777
——————————————
PS: make sure the path = /home/hani/Shared_Folder exist and writable, or chmod 0777 this path

Edit /etc/krb5.conf

——————————————
[libdefaults]
default_realm = URCOMPANY.LOCAL
krb4_config = /etc/krb.conf
krb4_realms = /etc/krb.realms
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true
# The following libdefaults parameters are only for Heimdal Kerberos.
v4_instance_resolve = false
v4_name_convert = {
host = {
rcmd = host
ftp = ftp
}
plain = {
something = something-else
}
}
[realms]
URCOMPANY.LOCAL = {
kdc = saturn.urcompany.local
admin_server = saturn.urcompany.local
}
[domain_realm]
.urcompany.local = SATURN.URCOMPANY.LOCAL
urcompany.local = SATURN.URCOMPANY.LOCAL
[login]
krb4_convert = true
krb4_get_tickets = true
———————————————-

Edit /etc/nsswitch.conf

———————————————-
passwd: compat winbind
group: compat winbind
———————————————-

Restart services:

/etc/init.d/samba restart
/etc/init.d/winbind restart

———————————————-

Join the domain:

net ads join -U administrator

———————————————-

Ref.: http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html

Post to Twitter Post to Delicious Post to Facebook

Leave a Reply

Seek in here
Translator
Archive