[Samba] Samba 3.0 and ADS How to

[John H Terpstra]

Wolfgang,

Please would you give us an update on your progress with the documentation
you provided below. I am sure many people will be interested to see this
develop further.

Cheers,
John T.

On Thu, 6 Nov 2003, Wolfgang Wagner wrote:

>
> Hello Dominik,
>
>
> > From: Dominik Brosch [mailto:samba.10.brosch at spamgourmet.com]
> >
> > HelloList,
> >
> > Do someone have got a link/document/"How To" for setting up
> > Samba 3.0 in
> > ADS-Enviroment.
> > I read Samba-Collection-How-To, but I got stuck and need help.
> > My favour will be a easy and perspicuous manual like a walkthrough
> >
>
>
> I started to write a siple walkthrough, but I am not finished yet.
> Also it is only in german:
> ---------------------------------------------------------------
> Samba 3 an ADS auf Debian-Woody unter Verwendung von Paketen von
> http://www.backports.org/debian
>
> 1. Installation Samba 3
> 2. Installation Winbindd
>
> 3. Konfiguration des DNS für Kerberos:
> in /var/cache/bind/<Zonefiles>:
>
> ;MS-ADS-Server
> adssrv        86400   IN      A       192.168.1.1
>
> ; Kerberos-Server (ADS-Server)
> _kerberos               IN      TXT     "YOUR.REALM.HERE"
> _kerberos-master._udp   IN      SRV     0 0 88 adssrv
> _kerberos-adm._tcp      IN      SRV     0 0 749 adssrv
> _kpasswd._udp           IN      SRV     0 0 464 adssrv
> ; Round-robin setup
> _kerberos._udp          IN      SRV     0 0 88 adssrv
> _ldap._tcp              IN      SRV     0 0 389 adssrv
>
>
> Damit wird der Kerberos-Server auch via DNS gefunden.
> Tip: Realm und DNS-Einträge aus dem ADS abschauen:
>      auf ADS-Server im DNS-Manager die Einträge suchen
>
> 4. Konfiguration samba3 in /etc/samba/smb.conf
> -fehlt noch- wie im Howto Kap. 7 beschrieben
>
> 5. Konfiguration Winbindd:
>
> in /etc/nsswitch.conf ändern von
>
> 	passwd:         compat
> 	group:          compat
> 	shadow:         compat
>
> nach:
>
> 	passwd:         files winbind
> 	group:          files winbind
> 	shadow:         compat
>
> 6. Den Rechner zur Domäne hinzufügen:
>
> samba:# net ads join -U administrator
> administrator password:
> [2003/11/06 12:31:37, 0] libads/ldap.c:ads_join_realm(1314)
>   Host account for riwake1 already exists - deleting old account
> Using short domain name -- <your.domainname.here>
> Joined 'SAMBA' to realm 'YOUR.REALM.HERE'
>
> 7. Testen, ob winbindd funktioniert:
>
> samba:# net ads user -U administrator
> administrator password:
> <Userliste aus ADS>
>
> 8. Laufwerksmapping von einem Windows-Rechner im ADS aus versuchen, sollte nun gehen
>
>
> ---------------------------------------------------------------
>
> Mit freundlichen Grüßen
>
>
> Wolfgang Wagner
> --
> Systemadministration
> Riwa GmbH, Zwingerstraße 1, 87435 Kempten, +49-831-52 29 63-537
> eMail:    wolfgang.wagner at riwa-gis.de
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
John H Terpstra
Email: jht at samba.org