Hi there
Can anyone help a clueless newbie who has lost the will to live?
I have followed a few how-to's on accessing samba shares as ADS domain user but can't get over the final hurdle of actually being able to access shares from a windows client. Here's the process.
1) Install samba, kerberos, winbind, etc. All is good
2) configure the /etc/krb5.conf to:
Quote:
[libdefaults]
default_realm = MYDOMAIN.COM
ticket_lifetime = 24h
forwardable = yes
[realms]
MYDOMAIN.COM = {
kdc = win2k.mydomain.com
default_domain = MYDOMAIN.COM
kpasswd_server = win2k.maydomain.com
admin_server = win2k
}
[domain_realms]
.mydomain.com = MYDOMAIN.COM
mydomain.com = MYDOMAIN.COM
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
|
No problems here either, kerberos ticket gained and 'net ads join' successful. command
wbinfo -u show ads user info and
wbinfo -g shows ads group info.
3) Edited /etc/samba/smb.conf as follows:
Quote:
[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.COM
server string = Net Server
security = ADS
password server = win2k.mydomain.com
log level = 3
log file = /var/log/samba/%m
max log size = 50
server signing = auto
printcap name = cups
preferred master = No
domain master = No
wins support = Yes
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind separator = +
[printers]
comment = All Printers
path = /tmp
guest ok = Yes
printable = Yes
browseable = No
[public]
path = /home/ftp/public
read only = No
guest ok = Yes
|
5) edit /etc/nsswitch.cong to:
Quote:
passwd compat files winbind
shadows compat files winbind
groups compat files winbind
|
6) [I] service smb/winbind start [I] all ok.
7) Access samba share from windows client. Samba server is present within neighbourhood network, but receive a username and password prompt when i try to access. When an ADS username is entered the prompt rejects and asks again with no entery every being gained.
Can anybody please tell me where i am going wrong or what i haven't done. I am losing the will to live.
Many thanks for any assistance?
PQ
