[Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

[steve]

On Sun, 2013-05-19 at 11:57 +0200, Ulrich Schneider wrote:
> I don't have a clue ... just want to make samba and windows ad work
> 
> uli at uli-sd30v10:/data$ net ads join -U Administrator
> Host is not configured as a member server.
> Invalid configuration.  Exiting....
> Failed to join domain: This operation is only allowed for the PDC of the 
> domain.
> uli at uli-sd30v10:/data$ cat /etc/nsswitch.conf
> # /etc/nsswitch.conf
> #
> # Example configuration of GNU Name Service Switch functionality.
> # If you have the `glibc-doc-reference' and `info' packages installed, try:
> # `info libc "Name Service Switch"' for information about this file.
> 
> passwd:         compat
> group:          compat
> shadow:         compat
> 
> hosts:          files mdns4_minimal [NOTFOUND=return] dns mdns4
> networks:       files
> 
> protocols:      db files
> services:       db files
> ethers:         db files
> rpc:            db files
> 
> netgroup:       nis
> uli at uli-sd30v10:/data$
> 
> 
> Am 19.05.2013 11:53, schrieb steve:
> > On Sun, 2013-05-19 at 11:30 +0200, Ulrich Schneider wrote:
> >> Looks to me like "valid users" is not working.
> >
> >>         valid users = @samdom+schueler
> >>
> >> [lehrer]
> >>         path = /data/lehrer
> >>         comment = Lehrer
> >>         read only = no
> >>         valid users = @samdom+lehrer
> >
> > Hi
> > samdom is a domain
> > I don't understand. wbinfo lists no users r groups. Do you want everyone
> > in the domain to have access?
> >
> > This would make sense:
> > valid users = @uli+someone-else
> >
> > What do you have in /etc/nsswitch.conf?
> >
> > One of the reasons I run away from smb.conf!
> > Steve
> >

Hi 
Try winbind:

/etc/nsswitch.conf
passwd:          files winbind
group:           files winbind

 ln -s /usr/local/samba/lib/libnss_winbind.so.2 /lib/libnss_winbind.so
 ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2

 ln -s /usr/local/samba/lib/pam_winbind.so /lib/security

Does getent passwd return any AD users?