debian 10: I can not integrate a linux machine into a Samba Ad
nathalie ramat
nathalie.ramat at univ-littoral.fr
Thu May 9 08:46:17 UTC 2019
Thank you for your response . sorry for using the wrong list.
Le 09/05/2019 à 10:25, Rowland Penny via samba-technical a écrit :
> See inline comments:
>
> On Thu, 9 May 2019 09:29:05 +0200
> nathalie ramat via samba-technical <samba-technical at lists.samba.org>
> wrote:
>
>
>> I configured smb.conf at my server :
> Er, no, you misconfigured your smb.conf on the DC ;-)
>
>> # global parameters
>> [global]
>> winbind enum users = yes
>> winbind enum groups = yes
>> winbind use default domain = yes
>> winbind separator = /
>> idmap config *:backend = tdb
>> idmap config *:range = 1000-19000éré correctement semble-t-il.
>> host msdfs = no
>> security = user
>> name resolve order = host
>> # ntlm auth = yes
>> # raw NTLMV2 auth = yes
>> # lanman auth =yes
>> # vfs objects = acl_xattr
>> map acl inherit = Yes
>> # store dos attributes = Yes
> I would suggest you remove the above lines, they either have no place
> in A Samba AD DC or slow things down.
>
>> and my linux user :
>>
>> [global]
>> security = ads
>> realm = lenzspitze.calais.fr
> Change the realm to uppercase
>
>> workgroup = LENZSPITZE
>> netbios name = testbugster
>> winbind separator = /
>> ntlm auth = yes
>> idmap uid = 0-50000
>> idmap gid = 0-50000
> No, that's the old way of doing things
>
>> winbind enum users = yes
>> winbind enum groups = yes
> Once everything is working, remove the two lines above, they are only
> required for testing purposes.
>
>> idmap config LENZSPITZE : backend = rid
>> idmap config LENZSPITZE : base_rid = 0
> You do not have to set the base_rid, but what you do have to do, set
> the 'idmap config' lines. See here:
>
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
>
> Finally, you really should have posted this to the samba mailing list,
> not to the samba-technical list
>
> Rowland
>
>
--
Nathalie RAMAT-LECLERCQ
Service Informatique
Universite du Littoral-Côte d'Opale
SCoSI - Service Commun du Système d'Information
Pôle Systèmes et réseaux
Centre de Gestion Universitaire de Calais
50 rue ferdinand Buisson
C.S 80699
62228 CALAIS CEDEX
More information about the samba-technical
mailing list