Share your knowledge at the LQ Wiki.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 01-07-2010, 07:19 PM   #1
LQ Newbie
Registered: May 2009
Posts: 24

Rep: Reputation: 0
Question Authenticating using a Win 2008 AD

Hi guys,

Tried following someone elses instructions on how to set this up.. so far I have done the following:

Step 1: Install the Required Packages

Note: Enter Y when asked if you want to install the additional packages

apt-get install krb5-user
apt-get install winbind samba

Step 2: Edit the /etc/krb5.conf File
    default = FILE10000:/var/log/krb5lib.log
    ticket_lifetime = 24000
    default_realm = ASSIGNMENT.LOCAL

        kdc = ASS-Server01-01.assignment.local
        admin_server = ASS-Server01-01.assignment.local
        default_domain = ASSIGNMENT.LOCAL
    .assignment.local = ASSIGNMENT.LOCAL
   assignment.local = ASSIGNMENT.LOCAL

Step 3: Edit /etc/samba/smb.conf
        security = ADS
        netbios name = ASS-Server01-01
        realm = ASSIGNMENT.LOCAL
        password server = ASS-Server01-01.assignment.local
        workgroup = ASSIGNMENT
        idmap uid = 500-10000000
        idmap gid = 500-10000000
        winbind separator = +
        winbind enum users = no
        winbind enum groups = no
        winbind use default domain = yes
        template homedir = /home/%D/%U
        template shell = /bin/bash
        client use spnego = yes
        domain master = no

Step 4: Edit /etc/nsswitch.conf to look like the example below
passwd:         compat winbind
group:          compat winbind
shadow:         compat
hosts:          files dns wins
networks:       files
protocols:      db files
services:       db files
ethers:         db files
rpc:            db files
netgroup:       nis

Step 5: Modify the PAM settings

1) /etc/pam.d/common-account should contain only the following lines
account sufficient
account required

2) /etc/pam.d/common-auth should contain only the following lines
auth    sufficient
auth    required nullok_secure use_first_pass

3) Modify the /etc/pam.d/common-password file, so the max parameter is set to 50, similar to the one shown below
password   required nullok obscure min=4 max=50 md5

4) Make sure the /etc/pam.d/common-session file contains the following line
session required umask=0022 skel=/etc/skel

Step 6: Make a directory to hold domain user home directories
Note: Use the value you put in the WORKGROUP tag of the /etc/samba/smb.conf file
mkdir /home/ASSIGNMENT
Step 7: Initialize Kerberos kinit Administrator@ASSIGNMENT.LOCAL Step 8: Join the system net ads join -U Administrator@ASSIGNMENT.LOCAL
And its then where I reach a problem... the error message I get is:

net ads join-U administrator
Enter Administrator's password:
[2010/01/08 00:15:02,   0] passdb/secrets.c:71(secrets_init)
    Failed to open /var/lib/samba/secrets.tdb
Failed to join domain: Unable to open secrets database
Any ideas?? Its driving me up the wall.

Thanks guys,
Old 01-08-2010, 01:40 PM   #2
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1984Reputation: 1984Reputation: 1984Reputation: 1984Reputation: 1984Reputation: 1984Reputation: 1984Reputation: 1984Reputation: 1984Reputation: 1984Reputation: 1984
nothing to do with networking. Moved to Linux - Newbie.
Old 01-09-2010, 04:19 PM   #3
LQ Newbie
Registered: May 2009
Posts: 24

Original Poster
Rep: Reputation: 0
Sorry... any help guys.. im still really stuggling!


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: The Win, Fail and Meh of Open Source in 2008 LXer Syndicated Linux News 0 12-24-2008 03:21 AM
Upgrade from 2008 to 2008.1 problems TuxLives Mandriva 2 11-14-2008 12:33 PM
LXer: DistroWatch Weekly: First Look at Mandriva Flash 2008, Gentoo Linux 2008.0 sche LXer Syndicated Linux News 0 01-28-2008 06:30 AM
WOL lin->win fails, win->win works? c0uchm0nster Linux - Networking 1 01-08-2007 12:33 AM
Authenticating POP3 clients against WIN-2k server soup21 Linux - Networking 3 12-12-2004 08:42 AM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 03:57 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration