Differences between version 26 and revision by previous author of ActiveDirectorySamba.
Other diffs: Previous Major Revision, Previous Revision, or view the Annotated Edit History
| Newer page: | version 26 | Last edited on Thursday, June 17, 2004 7:16:44 pm | by DanielLawson | Revert |
| Older page: | version 23 | Last edited on Thursday, June 17, 2004 11:25:38 am | by GreigMcGill | Revert |
@@ -57,31 +57,39 @@
! Configure Samba3 and Winbindd
This part is the easy one, we just create ourselves a default Samba configuration with at least the following entries (Note this is a completely empty and default configuration file, and you may wish to add more. A file share would be handy to add).
+<verbatim>
''/etc/samba/smb.conf''
[[global]
# general options
workgroup = THINCLIENT
netbios name = MAIL
# winbindd configuration
- winbind separator = + ''The default character
is \ which is good if you use mod_ntlm since that's it's
character,
users only have
to remember 1
syntax''
- idmap uid = 10000-20000 ''alias of winbind uid''
- idmap gid = 10000-20000 ''alias of winbind gid''
+ # default
winbind separator is \,
which is good if you use mod_ntlm since that is the
character it uses.
+ #
users only need
to know the one
syntax
+ winbind separator = +
+
+ # idmap uid and idmap gid are aliases for winbind uid and winbid gid, respectively
+ idmap uid = 10000-20000
+ idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%D/%U
template shell = /bin/bash
# Active directory joining
- # "ads server" is only necessary if your kdc can't be located using /etc/krb5.conf -- JamesSpooner
+ # "ads server" is only necessary if your kdc
+ #
can't be located using /etc/krb5.conf -- JamesSpooner
# ads server = test1.thinclient.test.org
security = ads
- encrypt passwords = yes ''This
is now the
default behavior
in Samba 3''
--EnigMa
+ #
encrypt passwords = yes is now default in Samba3
-- EnigMa
+ encrypt passwords = yes
realm = thinclient.test.org
- password server = test1.thinclient.test.org ''This
handles the "ads server =" directive as well''
--EnigMa
-
+ # this
handles the "ads server = " directive as well -- EnigMa
+ password server = test1.thinclient.test.org
+</verbatim>
NB: The important things to pay attention to here are the name of our samba machine (netbios name), the workgroup, and the ActiveDirectory stuff.
! Configure Kerberos5
