Samba e Active Directory .:. PippoFante.it

        _____  _  _____  _____  _____  _____  _____  _   _  _____  _____        
       |  _  ||_||  _  ||  _  ||  _  ||  ___||  _  ||  \| ||_   _||  ___|
       | |_| | _ | |_| || |_| || | | || |__  | |_| ||     |  | |  | |__  
       |  ___|| ||  ___||  ___|| | | ||  __| |  _  || |\  |  | |  |  __|
       | |    | || |    | |    | |_| || |    | | | || | | |  | |  | |___
       |_|    |_||_|    |_|    |_____||_|    |_| |_||_| |_|  |_|  |_____|

Samba e Active Directory 2008.07.23 13:55

Unire una macchina Linux (*BSD, Solaris, ...) a un dominio (Active Directory) Windows talvolta è comodo, talvolta è utile, talvolta è necessario. Per ottenere questo risultato si usa Samba.

Con Debian:

# apt-get install samba winbind

+--8<--+[ /etc/samba/smb.conf ]+----8<--------8<----------------8<-------------+
[global]
	netbios name = HOST
	workgroup = DOMAIN
	security = domain
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
#	obey pam restriction = no
#	client schannel = no
	idmap uid = 10000-20000
	idmap gid = 10000-20000
+------------->8---------------->8-------->8----+[ /etc/samba/smb.conf ]+-->8--+

+--8<--+[ /etc/nsswitch.conf ]+----8<--------8<----------------8<--------------+
	passwd:	files winbind
	group:	files winbind
	hosts:	files dns winbind
+-------------->8---------------->8-------->8----+[ /etc/nsswitch.conf ]+-->8--+

# testparm -s /etc/samba/smb.conf
# net rpc join -U domain_admin

Nonostante

# net rpc testjoin
Join to 'DOMAIN' is OK

e vari /etc/init.d/(samba|winbind) (reload|restart) devo riavviare affinché il server sia effettivante e completamente in dominio, infatti:

# wbinfo -t
checking the trust secret via RPC calls succeeded
# wbinfo -a DOMAIN\\user%password
plaintext password authentication succeeded
challenge/response password authentication succeeded
# wbinfo -n user
S-1-5-01-0123456789-012345678-01234567-0123 User (1)

Altri check:

# wbinfo -u
# wbinfo -g
# wbinfo -N host
# getent passwd 'DOMAIN\user'

pippofante.it by Federico Mion