[Samba] Help win10 join

[Rowland Penny]

On Thu, 21 Sep 2017 14:53:22 +0200
Marco Gemignani <marko.gem at inwind.it> wrote:

> 
> 
> Il 20/09/2017 18:11, Rowland Penny via samba ha scritto:
> > On Wed, 20 Sep 2017 17:41:26 +0200
> > Marco Gemignani <marko.gem at inwind.it> wrote:
> >
> >> Uh, i have a lot of script based on ubuntu so i prefer use ubuntu
> >>
> >> i'm testing it on a VM, and is so simple now create an AD, and now
> >> w10 join this new domain with no problem.
> >> But now how i can let samba user log locally on the server? I have
> >> to join the sistem to the domain?
> >>
> >>
> >> Sorry for my stupids question....
> >>
> > So I take it you now have a Samba AD DC running in a VM and have
> > joined a Win10 machine to the domain. You now want a domain user to
> > be able to login directly into the Samba AD DC.
> >
> > Provided you have installed the right packages, it may just be as
> > simple as telling /etc/nsswitch.conf to use winbind for the passwd &
> > group lines.
> >
> > You will also have to add a couple of lines to the smb.conf:
> >
> >          template shell = /bin/bash
> >          template homedir = /home/%U
> >
> > The last line isn't that important, the default is:
> >
> >          template homedir = /home/%D/%U
> >
> > With this you will have to create a directory in /home named after
> > your WORKGROUP (it has to be in uppercase)
> >
> > Finally, add this line to /etc/pam.d/common-session :
> >
> > session    required   pam_mkhomedir.so skel=/etc/skel/ umask=0022
> >
> > So, what packages did you install before you provisioned Samba ?
> > i.e. apt-get install samba ????????????????
> >
> > Rowland
> 
> Yes, do as you told me and works like a charm
> 
> istalled as
> sudo apt-get install samba krb5-user krb5-config winbind
> libpam-winbind libnss-winbind
> 
> Created some users and can login from w10 macchines and olso logon 
> locally to the serve, this useful for me for ssh access and ftp.
> 
> Now, the next questions, how to mount use home folder (windows
> profile)? In old samba
> 
> logon drive = H:
> logon home = \\server\users\%U
> 
> 
> With the new samba?

There are a couple of attributes in AD for that:

homeDrive and homeDirectory

Hopefully you work out which is which ;-)

Rowland