[Samba-it] winbind Error looking
crucittig at virgilio.it
crucittig at virgilio.it
Tue Sep 9 09:32:01 MDT 2003
Questa e la configurazione di smb.conf
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
# $Id: smb.conf,v 1.2.4.6 2002/03/13 18:56:16 peloy Exp $
#
global]
netbios name = MIO
# server string is the equivalent of the NT Description field
server string = %h server (Samba %v)
encrypt passwords = yes
smb passwd file= /etc/samba/smbpasswd
time server=yes
guest account=nobody
usernamemap =/etc/samba/users.map
logon path=\\%N\profiles\%U
add user script= useradd -d /dev/null -g machines -s /bin/false -M %u
add user script=smbpasswd -a -m %u
add user script =useradd %u -g smbusers
delete user script=userdel %u
security=domain
domain logons= no
workgroup = Dominio
#nome netbios della macchina che fa da PDC
password server= x.x.x.x
allow trusted domain?yes
# invalid users = root
socket options = TCP_NODELAY
local master = no
; os level = 20
domain master = no
preferred master = no
wins support = no
; wins server = w.x.y.z
; dns proxy = yes
;name resolve order = lmhosts host wins bcast
# Name mangling options
;preserve case = yes
;short preserve case = yes
;unix password sync = false
;passwd program = /usr/bin/passwd %u
;passwd chat =*Enter\snew\sUNIX\spassword:* %n\n
;*Retype\snew\sUNIX\spassword:* %n\n
; pam password change = no
# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
winbind separator= +
# range per il rimappaggio
winbind uid = 10000-20000
winbind gid = 10000-20000
#permette l' enumerazione
winbind enum users=yes
winbind enum groups=yes
template shell = /bin/false
template homedir=/dev/null
winbind cache time=15
2-Ho aggiunto le righe winbind nel file nsswitch
3-ho modificato i file pam come indicato nel manuale:
In /etc/nsswitch.conf put the following:
passwd: files winbind
group: files winbind
In /etc/pam.d/* replace the auth lines with something like this:
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_nologin.so
auth sufficient /lib/security/pam_winbind.so
auth required /lib/security/pam_pwdb.so use_first_pass shadow
nullok
Note in particular the use of the sufficient keyword and
the
use_first_pass keyword.
Now replace the account lines with this:
account required /lib/security/pam_winbind.so .PP The next step is
to
join the domain. To do that use the smbpasswd program like this:
smbpasswd -j DOMAIN -r PDC -U Administrator
The username after the -U can be any Domain user that has administrator
privileges on the machine. Substitute your domain name for "DOMAIN"
and the name of your PDC for "PDC".
Next copy libnss_winbind.so to /lib and pam_winbind.so to /lib/secu-
rity. A symbolic link needs to be made from /lib/libnss_winbind.so
to
/lib/libnss_winbind.so.2. If you are using an older version of
glibc
then the target of the link should be /lib/libnss_winbind.so.1.
Ma quando eseguo getent passwd mi viene dato errore di looking e sul server
la macchina samba viene vista come serve di backup!Dove sbaglio?
nota:alle condivisioni posso accedere come guest .
More information about the samba-it
mailing list