[Samba] Samba 4.1.9 member server config in a samba 4 ADS Domain

[Daniel Müller]

Dear all,

I try to setup a samba 4 member server on centos 6.5. The wikis and howtos I
have found are very confusing.
Which is the right way to do this. So winbind can map the domain users and
groups.
What I have done yet is,
Set up Kerberos working and can contact my ADS-kerberos Servers:
  klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: Administrator at TPLK.LOC

Valid starting     Expires            Service principal
07/22/14 12:34:21  07/22/14 22:34:21  krbtgt/TPLK.LOC at TPLK.LOC
        renew until 07/29/14 12:34:18

Installed samba4.1.9 from gz without any provision. 
Set winbind right : ldconfig -v |grep winbind
ldconfig: /etc/ld.so.conf.d/kernel-2.6.32-431.20.3.el6.x86_64.conf:6:
duplicate hwcap 1 nosegneg
        libnss_winbind.so -> libnss_winbind.so.2
        libnss_winbind.so -> libnss_winbind.so.2

set /etc/nsswitch.conf
to: 
passwd:     files winbind
shadow:     files
group:      files  winbind

hosts:      files dns

Do I have to provision the samba4 server in any way to establish a
/usr/local/samba/etc/smb.conf?
Or do I make smb.conf by hand?
Do I have to start windbind in server protocols im [global]!?
What is the way to join right to the samba4 ads domain?

Greetings 
Daniel



EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen 
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de