实现功能：Samba 登陆 MS DOMAIN 成为域成员
测试平台：RedHat AS 3 + W2K Server
samba-client-3.0.0-14.3E
samba-common-3.0.0-14.3E
samba-3.0.0-14.3E
krb5-libs-1.2.7-19
krb5-workstation-1.2.7-19
环境如下:
Domain: win2k.com
network: 192.168.0.0/24
dns: 192.168.0.15
RedHat AS 3
Hostname: home.win2k.com
IP: 192.168.0.1
Action: File server
Win2k Server + SP4
netbios name：win
Hostname: win.win2k.com
IP:192.168.0.33
AD Administrator: administrator
password: ******
Samba的配置
# Global parameters
[global]
workgroup = win2k.com
server string = samba
security = domain
password server = win.win2k.com
encrypt passwords = yes
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
hosts allow = 192.168.0.
[homes]
comment = Home Directories
read only = No
browseable = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
添加系统用户及Samba用户 administrator , 该用户应有管理MS DOMAIN 的权限
# useradd -d /dev/null -s /bin/false administrator
# passwd administrator
添加Samba用户
# smbpasswd -a administrator
配置 /etc/krb5.conf, 属于包krb5-libs-1.2.7-19
# cp -a /etc/krb5.conf /etc/krb5.conf.orig
# vi /etc/krb5.conf
# vi /etc/krb5.conf.orig
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = WIN2K.COM
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
WIN2K.COM = {
kdc = win.win2k.com:88
admin_server = win.win2k.com:749
default_domain = win2k.com
}
[domain_realm]
.example.com = win2k.com
example.com = win2k.com
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
初始化用户 admin和密码
# /usr/kerberos/bin/kinit llzqq@win2k.com
加入DOMAIN
# net join –S win2k.com –U administrator%password
在 MS DOMAIN 中查看主机 home 已经加入到win2k.com中
