samba - Mar 2008 - check join Linux (SAMBA) to Domain controller Win2003!

Hi Dear !

 

        I?m practice lab File server (SAMBA with CentOS 4.6), With model SAMBA
is DOMAIN members of domain 2003 server (Sharing file and authenticate with
account Domain 2003).  I?m configure windbind (following document userguide):

 

cp ../samba/source/nsswitch/libnss_winbind.so /lib

ln -s /lib/libnss winbind.so /lib/libnss winbind.so.2

 

c?u h?nh /etc/nsswitch.conf

 

# Cau hinh cua HUGO

 

passwd:     files winbind

shadow:     files

group:      files winbind

 

#hosts:     db files ldap nis dns

hosts:      files dns

 

root#/sbin/ldconfig -v | grep winbind

 

sau ?? m?nh join SAMBA server v?o domain : 

 

root#/usr/local/samba/bin/net rpc join -S PDC -U Administrator

 

---> OK: appear 

Joined domain HO.

 

I?m  configure file smb.conf following:

 

 

#======================= Global Settings ====================================
 

[global]

 

          workgroup = ho

          server string = Samba Server of HUGO

          log file = /var/log/samba/%m.log

          max log size = 50

          security = domain

          encrypt passwords = yes

#         smb passwd file = /etc/samba/smbpasswd

          password server = ho-dc01

          socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

 

#         Setup parameter for domain VPBANK

#         winbind separator = +

          idmap uid = 10000-20000

          idmap gid = 10000-20000

          winbind enum users = yes

          winbind enum groups = yes

#         template homedir = /home/winnt/%D/%U

#         template shell = /bin/bash

 

#============================ Share Definitions =============================
 

[users]

   comment = Du lieu chung cua moi nguoi

   path = /users/

   valid users = hugo hugo1 quanghuy

   public = yes

   writable = yes

   printable = no

   create mask = 0765

 

[Public]

   comment = Du lieu Public cua moi nguoi

   path = /public/

   public = yes

   only guest = yes

   writable = yes

   printable = no

 

then apply: testparm smb.conf  --> OK

 

final run : windbindd  --> check services start ok. (disabled nscd service)

 

and I want to list user of domain : wbinfo -u

 

appear errors:  Error looking up domain users

 

similar with Groups.

 

Please help me, thanks!!.

 

 

*************************************************
Nguyen Quang Huy  

 

Add: Tang 4 - Trung T?m Tin Hoc
So 8 Le Thai To - Hoan Kiem - Ha Noi
Mob: 0914-257-830
Tel: 04-9288858 ext 425
Fax: + 84 4 928 9213
Email:  <mailto:quanghuy@vpb.com.vn> quanghuy@vpb.com.vn
LinQ:    <mailto:kquanghuy@web.vpb.com.vn> quanghuy@web.vpb.com.vn

Hi,

Dans sa grande sagesse, Nguyen Quang Huy a ?crit, le 05.03.2008 03:26
:
>         I?m practice lab File server (SAMBA with CentOS 4.6), With model
SAMBA is DOMAIN members of domain 2003 server (Sharing file and authenticate
with account Domain 2003).  I?m configure windbind (following document
userguide):
>   
[snip]
> [global]
>
>           workgroup = ho
>
>           server string = Samba Server of HUGO
>
>           log file = /var/log/samba/%m.log
>
>           max log size = 50
>
>           security = domain
>   
Maybe this is a stupid suggestion, but should you not rather use 
security = ads ? In which case you would also need to configure
kerberos.
>           encrypt passwords = yes
>
> #         smb passwd file = /etc/samba/smbpasswd
>
>           password server = ho-dc01
>
>           socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>
>  
>
> #         Setup parameter for domain VPBANK
>
> #         winbind separator = +
>
>           idmap uid = 10000-20000
>
>           idmap gid = 10000-20000
>
>           winbind enum users = yes
>
>           winbind enum groups = yes
>
> #         template homedir = /home/winnt/%D/%U
>
> #         template shell = /bin/bash
>   
[snip]

Cheers,

-- 
Oliver Henriot, UMS MI2S, http://mi2s.imag.fr/
Moyens Informatiques et Multim?dia
Domaine universitaire BP53 / 38041 Grenoble cedex 9 / France
tel.: +33 4 76 51 43 48      fax: +33 4 76 51 47 15

Trust in CNRS's certificates
http://igc.services.cnrs.fr/Doc/General/trust.html 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4046 bytes
Desc: S/MIME Cryptographic Signature
Url :
http://lists.samba.org/archive/samba/attachments/20080305/dcf5c3f1/smime.bin