[Samba] Samba authentication using ADS

[Andrew Masterson]

Try this:

http://wiki.samba.org/index.php/Samba_&_Active_Directory


> -----Original Message-----
> From: samba-bounces+andrew.masterson=nuvistaenergy.com at lists.samba.org
>
[mailto:samba-bounces+andrew.masterson=nuvistaenergy.com at lists.samba.org
]
> On Behalf Of Prashanth Adiyodi
> Sent: Wednesday, October 01, 2008 7:42 AM
> To: samba at lists.samba.org
> Subject: [Samba] Samba authentication using ADS
> 
> Greetings
> 
> 
> 
> I need help in setting up my linux box with ADS authentication on
Samba.
> I know that it can be done using winbind and Kerberos. I tried some of
> the online methods but I am not able to get a result.
> 
> 
> 
> Request you to please help me with this.
> 
> 
> 
> These are the steps I followed to setup winbind
> 
> 
> 
> *	Using Authconfig command I put in the relavant details like "Use
> Winbind" and Use "Winbind Authentication" and left "Cache
Information",
> "Use MD5 Passwords" and "Use Shadow Passwords" selected
> *	Then I put details about the domain with authentication.
> 
> 
> 
> *	I placed entries in /etc/nssswitch as
> 
> passwd:     files winbind
> 
> shadow:     files winbind
> 
> group:      files winbind
> 
> 
> 
> 
> 
> This is the output I get
> 
> 
> 
> [2008/10/01 18:27:56, 0] libads/kerberos.c:ads_kinit_password(146)
> 
>   kerberos_kinit_password Administrator at EXAMPLE.COM failed: Cannot
find
> KDC for requested realm
> 
> [2008/10/01 18:27:56, 0] utils/net_ads.c:ads_startup(186)
> 
>   ads_connect: Cannot find KDC for requested realm
> 
> [2008/10/01 18:27:56, 0]
rpc_client/cli_pipe.c:cli_nt_session_open(1451)
> 
>   cli_nt_session_open: cli_nt_create failed on pipe \lsarpc to machine
> ads.example.com.  Error was NT_STATUS_ACCESS_DENIED
> 
> could not initialise lsa pipe
> 
> could not obtain sid for domain
> 
> 
> 
> Shutting down Winbind services:                            [FAILED]
> 
> Starting Winbind services:                                 [  OK  ]
> 
> 
> 
> Please help me as to what is going wrong. Appreciate if any members
> could help me out in configuring using Kerberos. Here also I edited
the
> krb5.conf, krb.conf and krb.realm with the correct parameters but stll
> am not able to get a solution.
> 
> 
> 
> Thanking you
> 
> 
> 
> Prashanth Adiyodi
> System Administrator
> 
> 
> Roamware (I) Pvt. Ltd.
> 7th Floor, Sigma, Hiranandani Gardens
> Technology Street, Powai,
> Mumbai-400 076
> Tel: 40406000 Ext: 6124
> GSM: 91-9833377712
> 
> www.roamware.com <http://www.roamware.com>
> "The information contained herein may include confidential or
privileged
> information and is intended solely for the recipient(s) noted above.
If
> you receive this e-mail in error, please respond to the sender and
> delete the e-mail. Any dissemination of this e-mail or the information
> contained in this e-mail or attachments to unintended parties is
> prohibited."
> 
> 
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba