Hi, I have successfully joined a Debian 7 box to a 2008 R2 Windows Domain using Samba and Winbind. The Linux uid is pulled from the uidNumber in Active Directory as is the shell and home dir. PAM is also configured to create a user's homedir on login. The trouble is that in AD the homedir is set to '/User' and I don't want that to be the case on the Debian boxes - I would like to set it as /home/domain/user. Can I override the homedir setting on a per-client basis using the smb.conf? I have tried using Template homedir = but it doesn't seem to have an effect. Thanks
Simon <simon at calmblue.net> writes:> I have successfully joined a Debian 7 box to a 2008 R2 Windows Domain > using Samba and Winbind. The Linux uid is pulled from the uidNumber in > Active Directory as is the shell and home dir. PAM is also configured > to create a user's homedir on login. > > The trouble is that in AD the homedir is set to '/User' and I don't > want that to be the case on the Debian boxes - I would like to set it > as /home/domain/user. > > Can I override the homedir setting on a per-client basis using the > smb.conf?AIUI from other ML correspondents, there are two winbinds implementations -- one for samba3 and one for samba4 -- and the latter doesn't let you change $HOME at all, as at 4.0.x. You probably want to look at sssd instead of winbind. I'm using a samba 4.0.9 AD DC and nss_winbind, and I got /home/DOMAIN/alice instead of /home/alice, so I just cheated by running "ln -s . /home/DOMAIN". I don't think that would work for you.
On Wed, 2013-10-30 at 22:27 +0000, Simon wrote:> The Linux uid is pulled from the uidNumber in > Active DirectoryHi That's a bad idea and may explain why the homedir is not working. It's best to leave uidNumber as it is and pull uid as samAccountName. e.g. you would expect a home directory to be something like: /home/domain/simon rather than: /home/domain/30012673 Cheers, Steve
Apparently Analagous Threads
- enumerating group members with nss_winbind (4.0.9 as AD DC)
- template homedir question
- Shares not accessible when using FQDN
- idmap troubles with any version 3.30 or later
- pam_winbind Appears to need a Network Connection to Succeed at Offline Authentication