[Samba] Samba configuration on AIX 5.2

[shaista.bano at iflexsolutions.com]

Hi ,

 

 

I am trying to configure Samba with ADS integration on AIX 5.2.

 

I am able to join to windows Domain and able to fetch list of windows
domain users with the command

/usr/local/samba/bin/wbinfo -u and also the groups with
usr/local/samba/bin/wbinfo -u .

I have added the below line methods.cfg

 

WINBIND

        program = /usr/lib/security/WINBIND

        options = authonly

 

I am unable to login to the Aix server using credentials of Domain user.

 

This process does not give any significant error in  winbindd.log .

 

I am looking for the steps that need to be followed on the PAM / krb
side to be able to login to AIX

Server with the windows domain user credentials

 

Here are my smb.conf and krb5.

Any help on this would be great.

 

Smb.conf

 

[global]

 

        workgroup = restore

        server string = Samba Server

        log file = /var/log/samba/%m.log

        max log size = 50

        security =  ADS

        realm = restore.com

        password server =  10.80.0.120

 

# Winbind config.###################################

        winbind separator = #

        idmap uid = 10000-20000

        idmap gid = 10000-20000

        winbind cache time = 15

        winbind enum users = yes

        winbind enum groups = yes

        template homedir = /home/%D/%U

        template shell = /bin/bash

        winbind use default domain = yes

 

[homes]

        comment = Home Directories

        browseable = no

        writeable = yes

        create mask = 0640

 

krb5.conf

 

[libdefaults]

        default_realm = RESTORE.COM

        ticket_lifetime = 24000

        dns_lookup_realm = true

        dns_lookup_kdc = true

        krb4_config = /usr/krb5-1.3.6/src/config-files/krb.conf

 

[realms]

        RESTORE.COM  = {

                admin_server = mailsrvr.restore.com

                kdc = mailsrvr.restore.com

                default_domain = RESTORE.COM

        }

 

 

[kdc]

 profile = /usr/krb5-1.3.6/src/config-files/kdc.conf

 

[domain_realm]

        .restore.com = RESTORE.COM

         restore.com = RESTORE.COM

 

[logging]

#       kdc = CONSOLE

 default = FILE:/var/log/krb5libs.log

 kdc = FILE:/var/log/krb5kdc.log

 admin_server = FILE:/var/log/kadmind.log

 

[appdefaults]

 pam = {

   debug = true

   ticket_lifetime = 36000

   renew_lifetime = 36000

   forwardable = true

   krb4_convert = false

 }

 

Regards,

Shaista 



DISCLAIMER:
This message contains privileged and confidential information and is intended only for the individual named.If you are not the intended recipient you should not disseminate,distribute,store,print, copy or deliver this message.Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted,corrupted,lost,destroyed,arrive late or incomplete or contain viruses.The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version.