How to connect Fedora 6 to existing Windows 2003 AD?
Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
How to connect Fedora 6 to existing Windows 2003 AD?
Hey guys I'm new to Linux and want some help.
I've heard about Linux a lot and have finally downloaded Fedora 6 and installed it, somehow got the dual boot working with XP Professional, where both are installed on seperate HDD's.
I'm trying to use this software in the corporate environment to see if it is really feasible. We have an already existing everything Windows environment. We have 2003 AD, File server, Exchange server, ISA server, desktops completely XP Professionals which are 300+.
I'm using my machine as the test and have already got fedora 6 running and been fiddling a bit and got a little familiar with the GUI environment.
Now the question:
I wanted to know how to add my linux PC as another desktop to the Windows 2003 domain and use the AD to authenticate the usernames and passwords. Once this is done I want to know how to use the existing exchange server on linux as Microsoft Outlook can on Windows desktop.
I keep being pointed to samba but can't find how to run it, there is no command line to type where I can get this running or started. Also I've been to similar threads search and I can't understand a thing.
On FC6, use the System->Administration->Authentication Applet to configure Kerberos and Windbind support on the 'Authentication' tab.
If you don't have an Authentication icon in the Administration menu, or either Kerberos or Winbind are not selectable on the Authentication tab, use the Applications->Add/Remove Software to install these packages (some may already be installed):
The AD Domain is usually the net doamin in uppercase, but it can be different, it depends on how you set it up.
On the Kerberos Configuration, use your network domain name in uppercase as the realm where ever the Realm is needed.
for example: if the net domain is mydomain,com use MYDOMAIN.COM for the realm.
Use you Windows Domain Controller's full hostname as the KDC and Admin Server, for example: mydc.mydomain.com
Check off both 'Use DNS...' check boxes on the Kerberos Configuration.
On the Winbind configuration, use your Windows Domain as the Winbind Domain
Select 'ads' as security model. Enter the Realm again as above for Winbind ADS Realm and your DC full hostname as Winbind Domain Controller.
Click the 'Join Domain' button. Save changes, if asked. Enter a Windows AD Admin username and password when prompted. This windows user must have Join Domain permissions.
If the join fails, you will need to manually set the default realm in the /etc/krb5.conf file:
This requires you to be the 'root' user, so open a terminal window and enter 'su -' and the enter root password when prompted.
If using gnome, enter 'gedit /etc/krb5.conf' to edit the file.
Change the 'default_realm = EXAMPLE.COM' line under the '[libdefaults]' section to be, for example:
'default_realm = MYDOMAIN.COM'
Save the file, then go back to Winbind config and use the 'Join Domain' button again.
Once the domain is joined, you can use Windows username and password to browse network resources
(Places->Network Servers) and Windows Usernames and password to log onto Linux (the username must also exist in Linux, but passwords can be different)
I believe (but don't quote me) that the Evolution mail client supports MS Exchange servers, but you will have to try it to be sure.
Thanks for the info I'm certainly going to try it. I wanted to know if I am locked out or unable to connect to the server after restart, how do I log in locally and do administrative changes?
I am asking this question because this happened last time I tried doing something, made the system changes in the same place mentioned and was able to browse the windows network and see the servers also but I was unable to connect to the main file server and isa server. So I thought, like any windows geek would do, restart as it solve 80% of the problems. And after restart I am not able to login even with the username and passwords I setup durring installation let alone domain authentication.
I will not be trying to connect to the windows domain for a long long time now. If 8 re-installs and finally getting to know the hard way that with ´root´ not ´administrator´ you can login locally when there is a problem authentication agianst Windows AD.
Anyways thanks for the help, I´m sure it works but I think my approach to start with linux was wrong.
Now,
I´ll first see the potential as a single desktop, then the workgroup environment, then the Linux server / workstation environment and finally co-existence with other platforms.
I have followed this thread, edited /etc/krb5.conf, /etc/samda/smb.conf, run: kinitnet and: ads joined successfully.
My Fedora box can see all of the network and shares on other network PC's, but it does not appear on the network and after restarting winbind, the logout & login is not able to logon via an ADS username and password.
When I run wbinfo -u -g I get all the users and groups from the windows AD
Hi there.
I have Fedora 7 set up on one pc at work and what I wanted to do was to use it as a file server. We have a domain and AD. I wanted Fedora to check the DC for users and passwords and I found directions to do that. It worked perfect. I'm not at work now but when I get there I'll post again with more details or link to these directions.
Well, I'm back at work and I found this HowTo.
Here is a link to it: http://forums.fedoraforum.org/showthread.php?t=92804
I used this guide and am able to log on to my Fedora Core 7 box with my AD username and password. Haven't used X but it works in text mode.
Last edited by OdinnBurkni; 08-13-2007 at 09:15 AM.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.