[Samba] Member Server Setup Assistance

[Stefan Kania]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello James,

looks good to me. Do you have any problems? just copy krb5.conf from
you DC to /etc on your memberserver and join the domain.
Remember it is not a good idee to use .local as TLD because it's
related to multicast Addresses

Stefan
Am 31.12.14 um 16:10 schrieb James:
> Hello Stefan,
> 
> Yes I'm using Samba4 as my DC's. I also provisioned my DC's with 
> RFC2307.
> 
> [global]
> 
> netbios name = PFMS1 workgroup = DOMAIN security = ADS realm =
> DOMAIN.LOCAL encrypt passwords = yes vfs objects = acl_xattr map
> acl inherit = yes store dos attributes = yes
> 
> idmap config *:backend = tdb idmap config *:range = 70001-80000 
> idmap config DOMAIN:backend = ad idmap config DOMAIN:schema_mode =
> rfc2307 idmap config DOMAIN:range = 500-40000
> 
> winbind nss info = rfc2307 winbind trusted domains only = no 
> winbind use default domain = yes winbind enum users  = yes winbind
> enum groups = yes
> 
> [demoshare] path = /srv/samba/test read only = no
> 
> On 12/31/2014 10:00 AM, Stefan Kania wrote: Hello James,
> 
> Am 31.12.2014 um 15:48 schrieb James:> Hello,
>>>> I'm following along with the wiki(Setup a Samba AD Member
>>>> Server) and I have a question after reading the 'Set up a
>>>> basic smb.conf' section.
> Please show us your smb.conf
> 
> Do I need to extend the schema in order for my member server to
>>>> successfully join and service file shares?
> No, you dont have to.
> 
> Do I need to configure a
>>>> krb5.conf file? Thanks.
> If your DC is a samba4 DC just copy krb5.conf to your new
> memberserver Stefan
> 
> -- Stefan Kania Landweg 13 25693 St. Michaelisdonn
> 
> 
> Signieren jeder E-Mail hilft Spam zu reduzieren. Signieren Sie
> ihre E-Mail. Weiter Informationen unter http://www.gnupg.org
> 
> Mein Schlüssel liegt auf
> 
> hkp://subkeys.pgp.net
> 
> 

- -- 
Stefan Kania
Landweg 13
25693 St. Michaelisdonn


Signieren jeder E-Mail hilft Spam zu reduzieren. Signieren Sie ihre
E-Mail. Weiter Informationen unter http://www.gnupg.org

Mein Schlüssel liegt auf

hkp://subkeys.pgp.net

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)

iEYEARECAAYFAlSkFpoACgkQ2JOGcNAHDTajKgCdGuZZYb8N/hwHTtgfGn9s+9bt
laIAoNPwisnJSbVEH4T/dbmA3LjGKyxl
=BmRe
-----END PGP SIGNATURE-----