[samba] Добавление машины в домен.

[Alexey Sidorov]

Kudashev Mike пишет:
> Alexey Sidorov пишет:
>> rpc - домен 2000 или NT (на 2003 этот режим тоже есть)
>> ads - домен 2003
>> не знаю какой у тебя включен
>>
>> пожалуй надо взглянуть на /etc/samba/smb.conf и /etc/krb5.conf
> /etc/samba/smb.conf
> [global]
>     dos charset = CP866
>     unix charset = CP1251
>     display charset = LOCALE
>     workgroup = KPK
>     netbios name = IT04
>     server string =  Samba server on %h (v. %v)
> 
>     printcap name = cups
>     load printers = yes
>     printing = cups
> 
>     log file = /var/log/samba/log.%m
>     max log size = 500
> 
>     security = ads
>     password server = 192.168.0.206
>     realm = KPK.LOCAL
> 
>    encrypt passwords = yes
> 
>     winbind uid = 10000-20000
>     winbind gid = 10000-20000
>     winbind enum users = yes
>     winbind enum groups = yes
>     ;winbind separator = @
>     winbind use default domain = yes
>     template homedir = /home/%D/%U
>     template shell = /bin/bash
> 
>     socket options = TCP_NODELAY
> 
>     dns proxy = no
> 
> 
> /etc/krb5.conf
> [logging]
>   default = FILE:/var/log/krb5libs.log
>   kdc = FILE:/var/log/krb5kdc.log
>   admin_server = FILE:/var/log/kadmind.log
> 
> [libdefaults]
>   ticket_lifetime = 24000
>   default_realm = KPK.LOCAL
>   dns_lookup_realm = false
>   dns_lookup_kdc = false
> 
> [realms]
>   KPK.LOCAL = {
>    kdc = xserver.kpk.local
>    admin_server = xserver.kpk.local
>    default_domain = kpk.local
>   }
> 
> [domain_realm]
>   .kpk.local = KPK.LOCAL
>   kpk.local = KPK.LOCAL
> 
> [kdc]
>   profile = /var/lib/kerberos/krb5kdc/kdc.conf
> 
> [pam]
>   debug = false
>   ticket_lifetime = 36000
>   renew_lifetime = 36000
>   forwardable = true
>   krb4_convert = false

для начала вроде надо добавить use spnego = yes в
/etc/samba/smb.conf
[global]

-- 
Alexey Sidorov
	mailto:alex на reutman.ru
	JID: alex на reutman.ru
	ICQ: 5052225

----------- следующая часть -----------
Было удалено вложение не в текстовом формате...
Имя     : signature.asc
Тип     : application/pgp-signature
Размер  : 252 байтов
Описание: OpenPGP digital signature
Url     : https://lists.altlinux.org/mailman/private/samba/attachments/20071008/a1848914/attachment.bin