CINXE.COM

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html> <head> <meta http-equiv="X-UA-Compatible" content="IE=Edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="shortcut icon" href="/htdocs/favicon.ico"> <script type="text/javascript" src="/htdocs/bugstatus.js"></script> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"> <meta name="robots" content="index,nofollow"> <title>JohnJacob - Debian Wiki</title> <script type="text/javascript" src="/htdocs/common/js/common.js"></script> <script type="text/javascript">  </script> <link rel="stylesheet" type="text/css" charset="utf-8" media="all" href="/htdocs/debwiki/css/common.css"> <link rel="stylesheet" type="text/css" charset="utf-8" media="screen" href="/htdocs/debwiki/css/screen.css"> <link rel="stylesheet" type="text/css" charset="utf-8" media="print" href="/htdocs/debwiki/css/print.css"> <link rel="stylesheet" type="text/css" charset="utf-8" media="projection" href="/htdocs/debwiki/css/projection.css"> <link rel="stylesheet" type="text/css" charset="utf-8" media="all" href="/htdocs/debian-wiki-1.0.css">   <link rel="alternate" title="Debian Wiki: JohnJacob" href="/JohnJacob?diffs=1&show_att=1&action=rss_rc&unique=0&page=JohnJacob&ddiffs=1" type="application/rss+xml"> <link rel="Start" href="/FrontPage"> <link rel="Alternate" title="Wiki Markup" href="/JohnJacob?action=raw"> <link rel="Alternate" media="print" title="Print View" href="/JohnJacob?action=print"> <link rel="Search" href="/FindPage"> <link rel="Index" href="/TitleIndex"> <link rel="Glossary" href="/WordIndex"> <link rel="Help" href="/HelpOnFormatting"> </head> <body lang="en" dir="ltr"> <div id="logo"><a href="https://www.debian.org" title="Debian Homepage"><img src="https://www.debian.org/Pics/openlogo-50.png" alt="Debian" width="50" height="61"></a></div> <div id="header"> <div id="wikisection"> <a href="/FrontPage" title="Debian Wiki Homepage">Wiki</a> <div id="username"><a href="/JohnJacob?action=login" id="login" rel="nofollow">Login</a></div> </div> <div id="navbar"> <ul id="navibar"> <li class="wikilink"><a href="/FrontPage">FrontPage</a></li><li class="wikilink"><a href="/RecentChanges">RecentChanges</a></li><li class="wikilink"><a href="/FindPage">FindPage</a></li><li class="wikilink"><a href="/HelpContents">HelpContents</a></li><li class="current"><a href="/JohnJacob">JohnJacob</a></li> </ul> </div> <form id="searchform" method="get" action="/JohnJacob"> <div> <input type="hidden" name="action" value="fullsearch"> <input type="hidden" name="context" value="180"> <label for="searchinput">Search:</label> <input id="searchinput" type="text" name="value" value="" size="20" onfocus="searchFocus(this)" onblur="searchBlur(this)" onkeyup="searchChange(this)" onchange="searchChange(this)" alt="Search"> <input id="titlesearch" name="titlesearch" type="submit" value="Titles" alt="Search Titles"> <input id="fullsearch" name="fullsearch" type="submit" value="Text" alt="Search Full Text"> </div> </form> <script type="text/javascript">  </script> <div id="logo"><a href="https://www.debian.org" title="Debian Homepage"><img src="https://www.debian.org/Pics/openlogo-50.png" alt="Debian" width="50" height="61"></a></div> <div id="breadcrumbs"><a href="/FrontPage" title="Debian Wiki Homepage">Wiki</a>/ </div> <ul class="editbar"><li><a href="/JohnJacob?action=login" id="login-1" rel="nofollow">Login</a></li><li class="toggleCommentsButton" style="display:none;"><a href="#" class="nbcomment" onClick="toggleComments();return false;">Comments</a></li><li><a class="nbinfo" href="/JohnJacob?action=info" rel="nofollow">Info</a></li><li><a class="nbattachments" href="/JohnJacob?action=AttachFile" rel="nofollow">Attachments</a></li><li> <form class="actionsmenu" method="GET" action="/JohnJacob"> <div> <label>More Actions:</label> <select name="action" onchange="if ((this.selectedIndex != 0) && (this.options[this.selectedIndex].disabled == false)) { this.form.submit(); } this.selectedIndex = 0;"> <option value="raw">Raw Text</option> <option value="print">Print View</option> <option value="RenderAsDocbook">Render as Docbook</option> <option value="refresh">Delete Cache</option> <option value="show" disabled class="disabled">------------------------</option> <option value="SpellCheck">Check Spelling</option> <option value="LikePages">Like Pages</option> <option value="LocalSiteMap">Local Site Map</option> <option value="show" disabled class="disabled">------------------------</option> <option value="RenamePage" disabled class="disabled">Rename Page</option> <option value="DeletePage" disabled class="disabled">Delete Page</option> <option value="show" disabled class="disabled">------------------------</option> <option value="show" disabled class="disabled">Subscribe User</option> <option value="show" disabled class="disabled">------------------------</option> <option value="show" disabled class="disabled">Remove Spam</option> <option value="show" disabled class="disabled">Revert to this revision</option> <option value="PackagePages">Package Pages</option> <option value="show" disabled class="disabled">------------------------</option> <option value="Load">Load</option> <option value="Save">Save</option> <option value="SlideShow">SlideShow</option> </select> <input type="submit" value="Do"> </div> <script type="text/javascript">  </script> </form> </li></ul> <h1 id="locationline"> <ul id="pagelocation"> <li><a href="/JohnJacob">JohnJacob</a></li> </ul> </h1> </div> <div id="page" lang="en" dir="ltr"> <div dir="ltr" id="content" lang="en"> Linux Samba Configuration: Debian Samba server connecting to Active directory 1. Installing software The first thing that you need to do is to install the required packages. <pre> #aptitude update #aptitude upgrade #aptitude install samba smbclient winbind krb5-doc krb5-user krb5-config</pre>Windows server information In this configuration I used the following windows info. Domain name: is414 Fully qualified domain name: is414.com Window domain controller: rkb-server Kerberos setup Open /etc/krb5.conf add the following lines to the krb.conf file. <ul><li style="list-style-type:none">[libdeffaults] <ul><li style="list-style-type:none">default_realm = IS414 </li></ul>[realms] <ul><li style="list-style-type:none">IS414.COM = { <ul><li style="list-style-type:none">kdc – rkb-server.is414.com admin_server – rkb-server.is414.com </li></ul>} </li></ul>[domain_realm] <ul><li style="list-style-type:none">kerberos.server = IS414.COM </li></ul></li></ul>After that has been completed do the following: <pre> #kinit administrator@IS414.COM</pre>Verify that it worked by using the following command: <pre> #klist</pre>Samba Setup Open the samba configuration file /etc/samba/smb.conf and add the following: <ul><li style="list-style-type:none">[global] <ul><li style="list-style-type:none">security = ADS password server = rkb-server encrypt passwords = yes workgroup = IS414 realm = IS414.COM idmap uid = 10000-20000 idmap gid = 10000-20000 winbind enum users = yes winbind enum groups = yes winbind use default domain = yes winbind separator = + </li></ul></li></ul>Creating a share in /etc/samba/smb.conf. Replace <a class="nonexistent" href="/WindowsShare">?</a>WindowsShare with any name you want. first create the folder: <pre> #mkdir /home/WindowsShare #chmod 777 /home/WindowsShare</pre>Add the following in the /etc/samba/smb.conf <ul><li style="list-style-type:none">[<a class="nonexistent" href="/WindowsShare">?</a>WindowsShare] <ul><li style="list-style-type:none">comment = Windows Share path = /home/WindowsShare read only = no create mask = 0775 directory mask = 0775 browsable = yes public = yes writeable = yes force create mode = 0775 force directory mode = 0775 force security mode = 0775 guest ok = no inherit permissions = yes nt acl support = yes </li></ul></li></ul>Test your configuration with the following command: <pre> #testparm -v</pre>Now you must restart the samba deamon. <pre> # /etc/init.d/samba stop</pre>Winbind configuration Stop the winbind deamon. <pre> #/etc/init.d/winbind stop</pre>edit the couple of lines of the /etc/nsswitch.conf file. <ul><li style="list-style-type:none">passwd: compat winbind group: compat winbind </li></ul>Joining the Domain start the samba and winbind deamons <pre> #/etc/init.d/samba start #/etc/init.d/winbind start</pre>Join the domain with the following command <pre> #net ads join -U administrator</pre>Test winbind with the following commands <pre> #wbinfo -u</pre>The wbinfo – u should list the AD users <pre> #wbinfo – g </pre>The wbinfo – g should list the AD groups All that is left is to test the connection from the server to verify that the share is working. </div><div id="pagebottom"></div> </div> <div id="footer"> JohnJacob (<a class="nbinfo" href="/JohnJacob?action=info" rel="nofollow">last modified 2009-03-16 03:29:58</a>) <ul id="credits"> <li>Debian <a href="https://www.debian.org/legal/privacy">privacy policy</a>, Wiki <a href="/Teams/DebianWiki">team</a>, <a href="https://bugs.debian.org/wiki.debian.org">bugs</a> and <a href="https://salsa.debian.org/debian/wiki.debian.org">config</a>.</li><li>Powered by <a href="https://moinmo.in/" title="This site uses the MoinMoin Wiki software.">MoinMoin</a> and <a href="https://moinmo.in/Python" title="MoinMoin is written in Python.">Python</a>, with hosting provided by <a href="https://www.man-da.de/">Metropolitan Area Network Darmstadt</a>.</li> </ul> </div> </body> </html>