Hi,ADS auth by linux without linux users for ads,
pls go thr this attachment,
its very imp.
pramod
Pardeep Sharma <[EMAIL PROTECTED]> wrote:
Hi Friends Plz help me as soon as possible, i want authenticate linux
clints with microsoft active directory. I know this possible by Ldap,But plz
can u anybody tell me each steps in details. i have urgently required for it
waiting for ur reply
With Warm Regards:
Pardeep Sharma.
---------------------------------
Heres a new way to find what you're looking for - Yahoo! Answers
[Non-text portions of this message have been removed]
Thanks & Regards
Pramod Jadhav
9224125058 / 9869770625
---------------------------------
Be a better Globetrotter. Get better travel answers from someone who knows.
Yahoo! Answers - Check it out.
----------
Edit /etc/nsswitch.conf
edit the lines and add winbindd to the end
passwd: files winbindd
shadow: files
group: files winbindd
hosts: files dns winbindd
add the lines from [global] to ur smb.conf file
before running smb server do this, add linux machine to ur ADS
smbpasswd -j DOMAIN -r PDC -U Administrator
| |
| |
| give ur Primary domain name (if not work give IP if PDC)
give the
domain as exactly same as yours
then give the Domain administrator password
u will get Machine is added to DOMIN means ur machine is successfully added to
domain
##### How to know PDC ####333
open ur ADS users and computer - right click on DOMAIN -operatin master - there
u will get pdc, if while adding to domain PDC name is not resoveld give the ip
#winbindd # it runs as a daemon
#service smb restart
now try to acess ur smb shares from domain , it will not ask password for valid
domain users
very time when u do change in smb.conf dont forget to run these 2 lines
killall -9 winbindd
service smb restart
----------
# Global parameters
[global]
workgroup = tjam ------ #Domain name
netbios name = PRAC
server string = prac.tjam.com
security = DOMAIN
encrypt passwords = Yes
password server = *
wins server = 192.16.1.192 ----- # Ip address of ur win server mostly
UR DNS
winbind separator = +
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind enum users = yes #------optional
winbind enum groups = yes #-----optional
[homes]
comment = Home Directories
valid users =%U
browseable = no
writeable = yes
[share name]
comment =
path = /share
valid users =%U
[Non-text portions of this message have been removed]