Differences between current version and predecessor to the previous major change of ActiveDirectorySamba.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 45 | Last edited on Monday, April 17, 2006 7:05:37 pm | by MichaelGronlund | |
| Older page: | version 43 | Last edited on Sunday, July 3, 2005 6:09:17 am | by TomaszChmielewski | Revert |
@@ -14,13 +14,35 @@
The Samba system is based upon a stock standard RedHat 9 system with the samba software upgraded to Samba3 (using RPM)
The following steps are needed to get the system functioning:
+# install and check necessary packages
# configure name resolution using either dns or a hosts file
# configure samba and winbindd
# configure kerberos
# testing Samba and winbindd
# good luck
+
+!! Install and Check necessary packages
+
+The following packages are required to sucessfully run all the commands detailed in this guide:
+
+Samba:
+# redhat-config-samba (or system-config-samba)
+# samba-common
+# samba-client
+# samba
+
+Kerberos:
+# pam_krb5
+# krb5-workstation
+# krb5-libs
+# krbafs
+
+You can query if these packages are installed by running:
+<pre>
+rpm -q package-name
+</pre>
!! Configure name resolution
Active Directory relies HEAVILY on DNS to resolve not only host names but services they provide as well. To set up DNS on the Linux box, see the DNSHowTo, otherwise consult necessary Windows documentation on setting up forward AND reverse DNS zones.
@@ -297,8 +319,16 @@
winbind enum users = yes
</verbatim>
8. store your winbind credentials with wbinfo --set-auth-user=DOMAIN\\administrator%password
+
+NOTE: This step may fail with one or more of the following errors:
+<verbatim>
+ could not obtain winbind separator!
+ could not obtain winbind domain name!
+</verbatim>
+Should you receive either or both errors, it is because winbind is not currently running continue with the remaining steps and return to this step after winbind has been started.
+
9. modify /etc/pam.d/samba (on woody) or the appropriate pam file to add "sufficient" for auth and account using pam_winbind.so. These need to go BEFORE the pam_unix.so calls for samba. My /etc/pam.d/samba is as follows:
<verbatim>
