samba - Sep 2013 - Samba as DC Member

Dear all,

I have install Windows AD and Linux client PC.

In Linux PC, I modify these file to allow AD user logon the Linux Client 
PC via LDAPS.
- /etc/sssd/sssd.conf
- /etc/krb5.conf
- /etc/pam.d/system-auth-ac
- /etc/pam.d/password-auth-ac
- /etc/openldap/ldap.conf

When I create SAMBA share folder on Linux Client PC, and my Windows PC 
want to connect to it, Windows prompt a login dialog for access that SAMBA 
share.
My problem is no matter I enter AD user account, or Linux 'root'
account,
it already said login error and cannot allow me to enter. What wrong of my 
setting?

My Windows AD is:
OS: Windows Server 2008 R2 64bit standard edition
IP: 192.168.10.1/16

My Windows Client is:
OS: Windows 7, 32bit Enterprise. (already join Windows AD domain).
IP: 192.168.20.1/16

My Linux Client is:
OS: CentOS 6.4, 64bit
IP: 192.168.30.1/16

Thank you very much
Kevin Tang

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: smb.conf.txt
URL:
<http://lists.samba.org/pipermail/samba/attachments/20130923/26e22aab/attachment.txt>

On Mon, 2013-09-23 at 15:51 +0800, KevinTang at umac.mo
wrote:
> Dear all,
> 
> I have install Windows AD and Linux client PC.
> 
> In Linux PC, I modify these file to allow AD user logon the Linux Client 
> PC via LDAPS.
> - /etc/sssd/sssd.conf
> - /etc/krb5.conf
> - /etc/pam.d/system-auth-ac
> - /etc/pam.d/password-auth-ac
> - /etc/openldap/ldap.conf
> My Linux Client is:
> OS: CentOS 6.4, 64bit
> IP: 192.168.30.1/16
> 
> Thank you very much
> Kevin Tang
> 
Hi
I think you want the client to be a file server no?

try in [global]
workgroup = MYDOMAIN
security = ADS
kerberos method = system keytab

Make sure /etc/hosts has:
127.0.0.1 centos-client.mydomain.com centos-client localhost

and that you can (at least) ping the 2008 box

Then try to join the domain:
net ads join -UAdministrator

That may get you a little closer.
HTH
Steve