LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 03-02-2012, 12:17 AM   #1
back2preeti
LQ Newbie
 
Registered: Feb 2012
Posts: 4

Rep: Reputation: 1
unable to map windows domain using samba


Hello all

this is my first post on this forum and I am trying to learn samba as PDC on my test vm. Please forgive me if I ask any stupid question.I am using Centos 6 and trying to connect my windows 7 machine to centos domain

I successfully created my linux box as DNS server server.example not I want to map my windows machine with example domain name

so I configured samba as PDC but it seems I am making some mistake as whenever I try to connect to example domain, windows machine say "cannot connect EXAMPLE domain"

I have followed many links
http://daniel.fiser.cz/?samba
http://www.centos.org/docs/5/html/De...a-servers.html

I found some where that kerberos is required to map windows and linux machine using domain.
Can anyone please help me with this?
Do I need to work any thing with kerberos to connect my windows machine with linux using domain?
As I don't know much about kerberos or LDAP
 
Old 03-02-2012, 11:04 PM   #2
cbtshare
Member
 
Registered: Jul 2009
Posts: 561

Rep: Reputation: 42
Here is a bit of verbiage on how to setup kerebos.
Code:
Procedure 12.1. Kerberos Configuration Steps

    If you find the need to manually configure the krb5.conf, you should edit it to have the contents shown in “Kerberos Configuration File: /etc/krb5.conf”. The final fully qualified path for this file should be /etc/krb5.conf.

    The following gotchas often catch people out. Kerberos is case sensitive. Your realm must be in UPPERCASE, or you will get an error: “Cannot find KDC for requested realm while getting initial credentials”. Kerberos is picky about time synchronization. The time according to your participating servers must be within 5 minutes or you get an error: “kinit(v5): Clock skew too great while getting initial credentials”. Clock skew limits are, in fact, configurable in the Kerberos protocols (the default is 5 minutes). A better solution is to implement NTP throughout your server network. Kerberos needs to be able to do a reverse DNS lookup on the IP address of your KDC. Also, the name that this reverse lookup maps to must either be the NetBIOS name of the KDC (i.e., the hostname with no domain attached) or the NetBIOS name followed by the realm. If all else fails, you can add a /etc/hosts entry mapping the IP address of your KDC to its NetBIOS name. If Kerberos cannot do this reverse lookup, you will get a local error when you try to join the realm.

    You are now ready to test your installation by issuing the command:

    root#  kinit [USERNAME@REALM]

    You are asked for your password, which you should enter. The following is a typical console sequence:

    root#  kinit ADMINISTRATOR@LONDON.ABMAS.BIZ
    Password for ADMINISTRATOR@LONDON.ABMAS.BIZ: 

    Make sure that your password is accepted by the Active Directory KDC. 

Example 12.1. Kerberos Configuration File: /etc/krb5.conf

[libdefaults]
	default_realm = LONDON.ABMAS.BIZ

[realms] 
	LONDON.ABMAS.BIZ = {
	kdc = w2k3s.london.abmas.biz
	}


The command

root#  klist -e 

shows the Kerberos tickets cached by the system.
 
1 members found this post helpful.
Old 03-03-2012, 03:25 AM   #3
MarkoSan
Member
 
Registered: Jun 2006
Location: Ljubljana
Posts: 57

Rep: Reputation: 1
I've succesfully joined Windows 7 machine into Samba Domain and PDC Controller: http://www.linuxquestions.org/questi...o-work-927399/And I did not needed Kerberos, if it helps, check out the link!
 
1 members found this post helpful.
Old 03-05-2012, 05:27 AM   #4
back2preeti
LQ Newbie
 
Registered: Feb 2012
Posts: 4

Original Poster
Rep: Reputation: 1
Here is my smb.conf
Code:
        workgroup = EXAMPLE
        server string = Samba Server Version %v

        netbios name = SERVER
# ----------------------- Standalone Server Options ------------------------
#
# Scurity can be set to user, share(deprecated) or server(deprecated)
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.

        security = user
        passdb backend = tdbsam
# ----------------------- Domain Members Options ------------------------

   password server = 192.168.0.100


        security = domain
        passdb backend = tdbsam
        realm = kerberos.SERVER

        password server = kerberos.server.example
# ----------------------- Domain Controller Options ------------------------
#

        security = user
        passdb backend = tdbsam

        domain master = yes
        domain logons = yes

/etc.krb.conf
Code:
[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = EXAMPLE
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true

[realms]
 EXAMPLE = {
  kdc = kerberos.example
  admin_server = kerberos.example
 }

[domain_realm]
 .example = EXAMPLE
 example = EXAMPLE
Code:
# kinit preeti@EXAMPLE
kinit: Cannot resolve network address for KDC in realm "EXAMPLE" while getting initial credentials

Last edited by back2preeti; 03-05-2012 at 05:29 AM.
 
Old 03-05-2012, 05:28 AM   #5
back2preeti
LQ Newbie
 
Registered: Feb 2012
Posts: 4

Original Poster
Rep: Reputation: 1
Quote:
Originally Posted by MarkoSan View Post
I've succesfully joined Windows 7 machine into Samba Domain and PDC Controller: http://www.linuxquestions.org/questi...o-work-927399/And I did not needed Kerberos, if it helps, check out the link!
I checked that link but I have already tried all the links in that page.
If you have done so than can you help me with some tips.

I checked on some blog that i need to make some registry settings for the same?
These all are just confusing me?
 
Old 03-06-2012, 12:06 AM   #6
MarkoSan
Member
 
Registered: Jun 2006
Location: Ljubljana
Posts: 57

Rep: Reputation: 1
Quote:
Originally Posted by back2preeti View Post
I checked that link but I have already tried all the links in that page.
If you have done so than can you help me with some tips.

I checked on some blog that i need to make some registry settings for the same?
These all are just confusing me?
Well in my thread there is a link to some page that describes Windows 7 registry tweak. Check it out and it should work!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Connecting to a Samba server (not on domain) from windows domain pc centos123 Linux - Server 35 07-12-2011 05:27 AM
dhcpd - Unable to add forward map from host.domain.org elvisious Linux - Software 1 03-09-2009 07:57 AM
how to map linux share on windows domain controller prakash.j Linux - Newbie 1 01-25-2008 03:52 PM
Samba 3.0.21a and Samba Domain Member Servers in a Windows 2003 ADS Domain ramz Linux - Networking 3 04-09-2006 08:26 PM
How do i map samba share in windows xp? ginda Linux - Newbie 3 01-27-2005 12:22 PM


All times are GMT -5. The time now is 07:29 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration