[Samba] Samba4 + Winbind

[Rowland Penny]

On Wed, 4 Jan 2017 12:25:29 +0000
Lukz Ferris via samba <samba at lists.samba.org> wrote:

> Rowland,
> 
> 
> I looked at Samba wiki, but it doesn't helped me as I wanted, maybe
> I'm doing something wrong.
> 
> 
> This is what I tried to do:
> 
> yum install pam*
> 
> 
> ./configure.developer --with-pam

./configure would have been enough

> 
> 
> make && make install
> 
> 
> ln
> -s /usr/local/samba/lib/libnss_winbind.so.2 /lib64/libnss_winbind.so
> 
> ln -s /lib64/libnss_winbind.so /lib64/libnss_winbind.so.2
> 
> 
> modified my nsswitch.conf
> 
> passwd: files winbind
> group: files winbind
> shadow: files
> 
> my smb.conf:
> 
> # Global parameters
> [global]
>         netbios name = DEVLUCAS1
>         realm = LUCAS.UFES.BR
>         workgroup = LUCAS
>         server role = active directory domain controller
> 
>         winbind use default domain = Yes
>         winbind cache time = 300
>         winbind reconnect delay = 30
>         winbind enum groups = Yes
>         #winbind use default domain = Yes
>         template shell = /home/U%
> 
> [netlogon]
>         path = /usr/local/samba/var/locks/sysvol/lucas.ufes.br/scripts
>         read only = No
> 
> [sysvol]
>         path = /usr/local/samba/var/locks/sysvol
>         read only = No

I would remove the winbind lines, they either don't do anything or are
defaults.

> 
> ln -s /usr/local/samba/lib/security/pam_winbind.so /lib/security
> 
> added in /etc/pam.d/system-auth:
> 
> auth sufficient pam_winbind.so
> account         sufficient pam_winbind.so
> session         required pam_mkhomedir.so
> session         required pam_winbind.so

Have a look here:

https://wiki.samba.org/index.php/Authenticating_Domain_Users_Using_PAM

Rowland