LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-07-2010, 07:19 PM   #1
mikejreading
LQ Newbie
 
Registered: May 2009
Posts: 24

Rep: Reputation: 0
Question Authenticating using a Win 2008 AD


Hi guys,

Tried following someone elses instructions on how to set this up.. so far I have done the following:

Code:
Step 1: Install the Required Packages

Note: Enter Y when asked if you want to install the additional packages


apt-get install krb5-user
apt-get install winbind samba


Step 2: Edit the /etc/krb5.conf File
[logging]
    default = FILE10000:/var/log/krb5lib.log
[libdefaults]
    ticket_lifetime = 24000
    default_realm = ASSIGNMENT.LOCAL

[realms]
    ASSIGNMENT.LOCAL = {
        kdc = ASS-Server01-01.assignment.local
        admin_server = ASS-Server01-01.assignment.local
        default_domain = ASSIGNMENT.LOCAL
}
[domain_realm]
    .assignment.local = ASSIGNMENT.LOCAL
   assignment.local = ASSIGNMENT.LOCAL

Step 3: Edit /etc/samba/smb.conf
[global]
        security = ADS
        netbios name = ASS-Server01-01
        realm = ASSIGNMENT.LOCAL
        password server = ASS-Server01-01.assignment.local
        workgroup = ASSIGNMENT
        idmap uid = 500-10000000
        idmap gid = 500-10000000
        winbind separator = +
        winbind enum users = no
        winbind enum groups = no
        winbind use default domain = yes
        template homedir = /home/%D/%U
        template shell = /bin/bash
        client use spnego = yes
        domain master = no

Step 4: Edit /etc/nsswitch.conf to look like the example below
passwd:         compat winbind
group:          compat winbind
shadow:         compat
hosts:          files dns wins
networks:       files
protocols:      db files
services:       db files
ethers:         db files
rpc:            db files
netgroup:       nis

Step 5: Modify the PAM settings

1) /etc/pam.d/common-account should contain only the following lines
account sufficient	pam_winbind.so
account required		pam_unix.so

2) /etc/pam.d/common-auth should contain only the following lines
auth    sufficient      pam_winbind.so
auth    required        pam_unix.so nullok_secure use_first_pass

3) Modify the /etc/pam.d/common-password file, so the max parameter is set to 50, similar to the one shown below
password   required   pam_unix.so nullok obscure min=4 max=50 md5

4) Make sure the /etc/pam.d/common-session file contains the following line
session required        pam_mkhomedir.so umask=0022 skel=/etc/skel

Step 6: Make a directory to hold domain user home directories
Note: Use the value you put in the WORKGROUP tag of the /etc/samba/smb.conf file
Code:
mkdir /home/ASSIGNMENT
Step 7: Initialize Kerberos kinit Administrator@ASSIGNMENT.LOCAL Step 8: Join the system net ads join -U Administrator@ASSIGNMENT.LOCAL
And its then where I reach a problem... the error message I get is:

Code:
net ads join-U administrator
Enter Administrator's password:
[2010/01/08 00:15:02,   0] passdb/secrets.c:71(secrets_init)
    Failed to open /var/lib/samba/secrets.tdb
Failed to join domain: Unable to open secrets database
Any ideas?? Its driving me up the wall.

Thanks guys,
Mike
 
Old 01-08-2010, 01:40 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974
nothing to do with networking. Moved to Linux - Newbie.
 
Old 01-09-2010, 04:19 PM   #3
mikejreading
LQ Newbie
 
Registered: May 2009
Posts: 24

Original Poster
Rep: Reputation: 0
Sorry... any help guys.. im still really stuggling!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: The Win, Fail and Meh of Open Source in 2008 LXer Syndicated Linux News 0 12-24-2008 03:21 AM
Upgrade from 2008 to 2008.1 problems TuxLives Mandriva 2 11-14-2008 12:33 PM
LXer: DistroWatch Weekly: First Look at Mandriva Flash 2008, Gentoo Linux 2008.0 sche LXer Syndicated Linux News 0 01-28-2008 06:30 AM
WOL lin->win fails, win->win works? c0uchm0nster Linux - Networking 1 01-08-2007 12:33 AM
Authenticating POP3 clients against WIN-2k server soup21 Linux - Networking 3 12-12-2004 08:42 AM


All times are GMT -5. The time now is 03:46 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration