-   Linux - Networking (
-   -   windows 2k domain controller and samba server (

maxut 06-01-2006 03:44 AM

windows 2k domain controller and samba server
hi all,
i have a windows 2k domain controller and i want to move file server on linux (centos 4.3). the problem is i dont know how to integrate linux samba server and win 2k pdc.


best regards.

paul_mat 06-01-2006 06:01 AM

1. stop both winbind and samba services

'/etc/init.d/smb stop'
'/etc/init.d/winbind stop'

2. edit Kerberos files to have the right configuration


default_realm = WINDOWS.SERVER.INT

kdc =
default_domain = WINDOWS.SERVER.INT
kpasswd_server =
admin_server =

[domain_realm] = WINDOWS.SERVER.INT

3. edit Samba files to have the right configuration


workgroup = server
security = ads
encrypt passwords = yes

username map = /etc/samba/smbusers

winbind uid = 10000-20000
winbind gid = 10000-20000
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes

4. now it's time to join the domain

'net ads join -U administrator -S mc1'

5. now it's time to start both winbind and samba services

'/etc/init.d/smb start'
'/etc/init.d/winbind start'

6. now hopefully all that went well, to test it out lets try this comand

'/usr/bin/wbinfo -g'

this should display all the groups in your active directory structure.

7. now just make a share in samba

nano /etc/samba/smb.conf


I suggest you install swat and use it to create shares, it's a good web interface into samba

cowanrl 06-01-2006 08:00 AM

Here's a couple of links that may help you integrate your Samba server into your Win2k Domain.

Kerberos can add a layer of complexity that you may not want to deal with. This link will show you how you can make your Samba server a domain member server without Kerberos:

If you want to integrate Samba into your AD domain and use Kerberos, look at this link:

To use winbind so you don't have to create user accounts on your Samba server, see this link:

maxut 06-01-2006 01:20 PM

thaks a lot to both of you.

best regards.

All times are GMT -5. The time now is 10:20 AM.