http://www.yourhowto.org/content/view/31/9/
1. stop both winbind and samba services
'/etc/init.d/smb stop'
'/etc/init.d/winbind stop'
2. edit Kerberos files to have the right configuration
/etc/krb5.conf
[libdefaults]
default_realm = WINDOWS.SERVER.INT
[realms]
WINDOWS.SERVER.INT = {
kdc = mc1.windows.server.int
default_domain = WINDOWS.SERVER.INT
kpasswd_server = mc1.windows.server.int
admin_server = mc1.windows.server.int
}
[domain_realm]
.windows.server.int = WINDOWS.SERVER.INT
3. edit Samba files to have the right configuration
/etc/samba/smb.conf
workgroup = server
security = ads
realm = WINDOWS.SERVER.INT
encrypt passwords = yes
username map = /etc/samba/smbusers
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
4. now it's time to join the domain
'net ads join -U administrator -S mc1'
5. now it's time to start both winbind and samba services
'/etc/init.d/smb start'
'/etc/init.d/winbind start'
6. now hopefully all that went well, to test it out lets try this comand
'/usr/bin/wbinfo -g'
this should display all the groups in your active directory structure.
7. now just make a share in samba
nano /etc/samba/smb.conf
[share]
path=/home/share
I suggest you install swat and use it to create shares, it's a good web interface into samba
http://www.yourhowto.org/content/view/32/9/