How join a Linux PC to a domain in Windows
 

Dear Forumers,
I have recently installed SuSE Linux Enterprise 9.0 on a PC. My objective is to setup FTP service on it and join it to my company's network. Problem is, I have already installed SuSE as well as SAMBA but I still can get it connected to the network (which is all running on Windows based OS). Please advise.

P/S: I have installed SAMBA but have no clue on how to configure it.

Help appreciated.

Thank You

Regards,
spurs_adr

Pretty vague question don't you think? I'd suggest for you to start by reading the manual and or documentation at www.samba.org

When you come across something you don't understand, ask here or try searching if it's already been asked.. ;)

join it to a windows domain... so you can what? what might that accomplish?

There are many reasons to join it to a Windows domain. The last company I worked for, we used it as all of our Windows machines logged in and were authenticated thru Active Directory, so joining it to the Domain made it much easier for users to access Samba shares on our Redhat Linux server using their Windows passwords, etc.

Perhaps if your not going to help with any type of solution and doubt why they would need such solutions, you should just skip it and move on to the next post.. ;)

Hi guys,
i am having problem in joining redhat 9 to domain run by win2003 server active directory. I have configured samba server(samba-2.2.7a-7.9.0) as-
in /etc/samba/sbm.conf file :

[global]
workgroup = {domain}
server string = {server name}

log file = /var/log/samba/%m.log
max log size = 50

security = domain
password server = [name of a PDC or BDC for {domain}]
encrypt passwords = yes
smb passwd file = /etc/samba/private/smbpasswd

local master = no
wins server = {wins server}
dns proxy = no


than i added a dummy entry to the smbpasswd file, which alredy exists in domain( same id thru which i login domain on win2003 server) .created a user account on the Linux serverand executed following commands:
cd /etc/samba/private
cat /etc/passwd | mksmbpasswd.sh > smbpasswd

and edited the smbpasswd file by removing all lines except those for the dummy user account.
than i ran:

smbpasswd -j DOMAIN -r PDC -U DOMAINADMINUSERNAME
password:

after submitting the password it gives error:
NT_SERVER_ACCESS_DENIED

Now what shud i do i am not able to understand where i went wrong?!!
Plz Help

There are a number of steps you need to take
1. Update samba to latest stable version
2. Configure smb.conf
Heres mine
[global]
workgroup = DOMAINNAME
netbios name = NETBIOSNAME
security = DOMAIN
idmap uid = 15000-40000
idmap gid = 45000-48000
winbind cache time = 15
winbind separator = +
winbind use default domain = Yes
use sendfile = Yes
wins server = IP OF WINS
template homedir = /home/%D/%U
template shell = /bin/false
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
log level = 3
[homes]
comment = Home Directories
#valid users = %U
path = /home/PATHTOHOMEDIR/%U
create mask = 0775
force create mode = 0775
directory mask= 0775
force directory mode = 0775
read only = No
browseable = No
read only = No
browseable = No
3. Edit /etc/nsswitch.conf and include the following

passwd: files winbind
group: files winbind
hosts: files dns

4. Check that /lib/security/pam_winbind.so exists and edit /etc/pam.d/authconfig
#%PAM-1.0
auth sufficient /lib/security/pam_winbind.so
account sufficient /lib/security/pam_winbind.so
auth sufficient /lib/security/$ISA/pam_rootok.so
auth required /lib/security/$ISA/pam_stack.so service=system-auth
account required /lib/security/$ISA/pam_permit.so
session required /lib/security/$ISA/pam_permit.so
edit /etc/pam.d/ech
#%PAM-1.0
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_nologin.so
auth sufficient /lib/security/pam_winbind.so
auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok
account required /lib/security/pam_winbind.so

edit /etc/pam.d/paswd
#%PAM-1.0
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_nologin.so
auth sufficient /lib/security/pam_winbind.so
auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok
account required /lib/security/pam_winbind.so

5. Windows Active Directory relies heavily on Windows DNS so make sure your linux box is configured to use the AD dns server in /etc/resolve.conf

6. run net rpc join -UUSERNAME%'PASSWORD'
You should receive a response back saying joined SUCHANDSUCH domain
7. Start winbindd and samba