[Samba] Winbind login overwrite homedir

basti mailinglist at unix-solution.de
Wed Jul 8 15:02:22 UTC 2020


homeDirectory = unset
unixHomeDirectory = /home/users/<username>

I thought I could overwrite it with template homedir = /home/%U


On 08.07.20 16:52, Rowland penny via samba wrote:
> On 08/07/2020 15:15, basti via samba wrote:
>>   cat /etc/nsswitch.conf
>> # /etc/nsswitch.conf
>> #
>> # Example configuration of GNU Name Service Switch functionality.
>> # If you have the `glibc-doc-reference' and `info' packages installed,
>> try:
>> # `info libc "Name Service Switch"' for information about this file.
>>
>> passwd:         files winbind
>> group:          files winbind
>> shadow:         files
>> gshadow:        files
>>
>> hosts:          files dns
>> networks:       files
>>
>> protocols:      db files
>> services:       db files
>> ethers:         db files
>> rpc:            db files
>>
>> netgroup:       nis
>>
>>
>> cat /etc/samba/smb.conf
>> [global]
>>         security = ADS
>>         workgroup = SAMDOM
>>         realm = SAMDOM.EXAMPLE.COM
>>
>>         log file = /var/log/samba/%m.log
>>         log level = 1
>>
>>         winbind refresh tickets = Yes
>>         dedicated keytab file = /etc/krb5.keytab
>>         kerberos method = secrets and keytab
>>         winbind use default domain = yes
>>
>>         load printers = no
>>         printing = bsd
>>         printcap name = /dev/null
>>         disable spoolss = yes
>>
>>         idmap config * : backend = tdb
>>         idmap config * : range = 1000-2000
>>
>>         idmap config SAMDOM:backend = ad
>>         idmap config SAMDOM:schema_mode = rfc2307
>>         idmap config SAMDOM:range = 2001-999999
>>         idmap config SAMDOM:unix_nss_info = yes
>>
>>         template homedir = /home/%U
>>         template shell = /bin/bash
>>
>>         client use spnego = yes
>>         client ntlmv2 auth = yes
>>         encrypt passwords = yes
>>         winbind use default domain = yes
>>         restrict anonymous = 2
>>
>>         # fix dfs error's in log ?
>>         host msdfs = no
>>
>>         # https://wiki.samba.org/index.php/PAM_Offline_Authentication
>>         winbind offline logon = yes
>>
>>         winbind enum users = yes
>>         winbind enum groups = yes
>>
>> OS: Debian 10.4
> 
> OK, which attribute have you set in AD 'homeDirectory' or
> 'unixHomeDirectory' ?
> 
> Rowland
> 
> 
> 
> 



More information about the samba mailing list