debian 10: I can not integrate a linux machine into a Samba Ad

[nathalie ramat]

Thank you for your response . sorry for using the wrong list.



Le 09/05/2019 à 10:25, Rowland Penny via samba-technical a écrit :
> See inline comments:
>
> On Thu, 9 May 2019 09:29:05 +0200
> nathalie ramat via samba-technical <samba-technical at lists.samba.org>
> wrote:
>
>
>> I configured smb.conf at my server :
> Er, no, you misconfigured your smb.conf on the DC ;-)
>
>> # global parameters
>> [global]
>>        winbind enum users = yes
>>        winbind enum groups = yes
>>        winbind use default domain = yes
>>        winbind separator = /
>>        idmap config *:backend = tdb
>>        idmap config *:range = 1000-19000éré correctement semble-t-il.
>>        host msdfs = no
>>        security = user
>>        name resolve order = host
>> #    ntlm auth = yes
>> #     raw NTLMV2 auth = yes
>> #    lanman auth =yes
>> #    vfs objects = acl_xattr
>>        map acl inherit = Yes
>> #    store dos attributes = Yes
> I would suggest you remove the above lines, they either have no place
> in A Samba AD DC or slow things down.
>
>> and my linux user :
>>
>> [global]
>>        security = ads
>>        realm = lenzspitze.calais.fr
> Change the realm to uppercase
>
>>        workgroup = LENZSPITZE
>>        netbios name = testbugster
>>        winbind separator = /
>>        ntlm auth = yes
>>        idmap uid = 0-50000
>>        idmap gid = 0-50000
> No, that's the old way of doing things
>
>>        winbind enum users = yes
>>        winbind enum groups = yes
> Once everything is working, remove the two lines above, they are only
> required for testing purposes.
>
>>        idmap config LENZSPITZE : backend = rid
>>        idmap config LENZSPITZE : base_rid = 0
> You do not have to set the base_rid, but what you do have to do, set
> the 'idmap config' lines. See here:
>
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
>
> Finally, you really should have posted this to the samba mailing list,
> not to the samba-technical list
>
> Rowland
>
>

-- 
Nathalie RAMAT-LECLERCQ

Service Informatique

Universite du Littoral-Côte d'Opale
SCoSI - Service Commun du Système d'Information
Pôle Systèmes et réseaux

Centre de Gestion Universitaire de Calais
50 rue ferdinand Buisson
C.S 80699
62228 CALAIS CEDEX