I've been tooling with this for a while, and I need some help... please!!
:)
Here's what I'm trying to do. I want a samba server to work with
winbind,
so that when I type 'getent passwd' it shows a list of local users, as
well as my domain user list. I want a user to be able to ssh into the
machine using their NT 4 domain username, like domain\username. That's
pretty much it.
Here's what I have done thus far to accomplish this, to no avail. I have
Redhat 9. I have installed samba 3.0 from the .rpm file from samba's
site.. I have edited the .conf file to look like it does at the bottom of
this email. I have put /etc/init.d/smb and winbind in the /rc.3/ folder
so that they will start up automatically on reboot. I have edited
nsswitch.conf to look like it does at the bottom of this email. I have
even gone so far as to edit the passwd file in /etc/pam.d/ to look like it
does in the Samba HOWTO's instructions on Winbind, included at the bottom.
I can type 'wbinfo -u' and it shows me the full-on list of all users. I
can join the domain with 'net rpc join -S PDC -U admin%passwd' and
receive
a 'joined domain successfully' response. Everything that I do seems to
be
working fine, except for some reason my machine is not looking to winbind
for its authentication. In the HOWTO, it says that after you join the
domain, and can type 'wbinfo -u(g)' and receive proper results, then you
should be able to type 'getent passwd' and get proper results as well.
But at that point I am coming to a stop.
Is there something I'm missing perhaps? Was the RPM file for redhat 9
compiled excluding some special option that I need to accomplish this
task? If so, I can certainly compile it from source, but I need to know
what option to include so I can know what results to expect. Or perhaps
just some step in the configuration that I'm missing? I'm working on a
deadline here and I need to get this working soon, so any help anyone can
offer me would be greatly appreciated.. Thanks again!
--Reference Material:
Location of HOWTO I am referring to:
/usr/share/swat/help/Samba-HOWTO-Collection.html
Contents of /etc/samba/smb.conf:
[global]
workgroup = DOMAIN
server string = FRODO
security = SERVER
password server = LUKE
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = No
local master = No
domain master = No
dns proxy = No
wins server = 192.168.1.2
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 30000-40000
Contents of /etc/nsswitch.conf:
(note: There are other lines in this file, but I have left them default,
the passwd and group lines are the only ones I have edited)
passwd: files winbind
shadow: files
group: files winbind
Contents of /etc/pam.d/passwd and /etc/pam.d/login
[root@frodo samba]# cat /etc/pam.d/passwd
#%PAM-1.0
auth required pam_stack.so service=system-auth
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
[root@frodo samba]# cat /etc/pam.d/login
#%PAM-1.0
auth required pam_securetty.so
auth sufficient pam_winbind.so
auth sufficient pam_UNIX.so use_first_pass
auth required pam_stack.so service=system-auth
auth required pam_nologin.so
account sufficient pam_winbind.so
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
session required pam_stack.so service=system-auth
session optional pam_console.so
Gabriel Matthews
Network Support
Cinergy Communications
"No. I am your father."
-Darth Vader, leader, devoted parent,
and friend to all.