View Source: SambaAsFileServer - Waikato Linux Users Group

Edit PageHistory Diff Info LikePages

I had a bit of trouble getting my Samba server to authenticate to an NT PDC, so here is how I did it[1].

* join the samba server to the domain
 root# /usr/local/samba/bin/smbpasswd -j DOMAIN -r PDC -U Administrator
* edit /etc/samba/smb.conf to include at least the following directives:
 [[global]
 <...>
 # separate domain and username with '+', like DOMAIN+username
 winbind separator = +
 # use uids from 10000 to 20000 for domain users
 winbind uid = 10000-20000
 # use gids from 10000 to 20000 for domain groups
 winbind gid = 10000-20000
 # allow enumeration of winbind users and groups
 # might need to disable these next two for performance
 # reasons on the winbindd host
 winbind enum users = yes
 winbind enum groups = yes
 # give winbind users a real shell (only needed if they have telnet/sshd/etc... access)
 template homedir = /home/winnt/%D/%U
 template shell = /bin/bash

* apt-get install winbind

* Now, as root edit /etc/nsswitch.conf to allow user and group entries to be visible from the winbindd daemon. After editing, the file look appear:

	passwd:     files winbind
	shadow:     files
	group:      files winbind

* see if winbind is working by typing wbinfo -u. This should echo back a list of users on your Windows users on your PDC. For example, I get the following response:
 CEO+Administrator
 CEO+burdell
 CEO+Guest
 CEO+jt-ad
 CEO+krbtgt

[1] With help from http://docs.biostat.wustl.edu/samba-2.2.8a/htmldocs/winbind.html.

* ActiveDirectorySamba may also be of some help to you.

2 pages link to SambaAsFileServer:

Last edited on Tuesday, May 16, 2006 10:05:48 pm by AristotlePagaltzis

Edit PageHistory Diff Info LikePages