User Tools
сервис_winbind
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
сервис_winbind [2021/02/25 16:41] val [Авторизация в режиме ADS/DOMAIN] |
сервис_winbind [2021/10/15 12:11] val [Использование WINBIND в библиотеке NSSWITCH] |
||
|---|---|---|---|
| Line 8: | Line 8: | ||
| ==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
| <code> | <code> | ||
| - | debian# cp /etc/samba/smb.conf /root/ | ||
| - | |||
| - | debian# apt purge samba samba-common | ||
| - | |||
| - | debian# apt autoremove | ||
| - | |||
| - | debian# rm -r /etc/samba/ | ||
| - | |||
| root@gate:~# apt install winbind | root@gate:~# apt install winbind | ||
| </code> | </code> | ||
| Line 30: | Line 22: | ||
| realm = CORPX.UN | realm = CORPX.UN | ||
| kerberos method = system keytab | kerberos method = system keytab | ||
| - | winbind use default domain = Yes | + | winbind use default domain = Yes |
| </code><code> | </code><code> | ||
| gate# net ads join -U Administrator | gate# net ads join -U Administrator | ||
| Line 69: | Line 61: | ||
| gate# net ads keytab add imap -U Administrator | gate# net ads keytab add imap -U Administrator | ||
| samba4.9# net ads keytab add_update_ads imap -k | samba4.9# net ads keytab add_update_ads imap -k | ||
| + | |||
| + | gate# net ads keytab add smtp -U Administrator | ||
| + | samba4.9# net ads keytab add_update_ads smtp -k | ||
| gate# net ads keytab add xmpp -k # С MS AD не работает, но, можно оставить через ktpass, с samba4 - OK ... | gate# net ads keytab add xmpp -k # С MS AD не работает, но, можно оставить через ktpass, с samba4 - OK ... | ||
| Line 115: | Line 110: | ||
| ==== Авторизация в режиме ADS/DOMAIN ==== | ==== Авторизация в режиме ADS/DOMAIN ==== | ||
| <code> | <code> | ||
| - | gate# cat /etc/samba/smb.confsmb.conf | + | gate# wbinfo -n user1 |
| + | |||
| + | gate# cat /etc/samba/smb.conf | ||
| </code><code> | </code><code> | ||
| [global] | [global] | ||
| Line 127: | Line 124: | ||
| idmap config * : range = 20000-40000 | idmap config * : range = 20000-40000 | ||
| template homedir = /home/%U | template homedir = /home/%U | ||
| + | #use suitable shell (what abount /usr/sbin/nologin ?) | ||
| template shell = /bin/sh | template shell = /bin/sh | ||
| </code><code> | </code><code> | ||
| Line 137: | Line 135: | ||
| <code> | <code> | ||
| - | gate# wbinfo -n user1 | + | gate# wbinfo -S `wbinfo -n user1|cut -d' ' -f1` |
| - | gate# wbinfo -S ... | + | |
| gate# wbinfo -i user1 | gate# wbinfo -i user1 | ||
| </code><code> | </code><code> | ||
| Line 146: | Line 144: | ||
| </code><code> | </code><code> | ||
| ... | ... | ||
| - | group: files winbind | + | passwd: files systemd winbind |
| - | passwd: files winbind | + | group: files systemd winbind |
| - | shadow: files winbind | + | shadow: files winbind |
| ... | ... | ||
| </code><code> | </code><code> | ||
| + | Может понадобиться, если установлен nscd | ||
| debian# service nscd restart && service nscd reload | debian# service nscd restart && service nscd reload | ||
| Line 156: | Line 155: | ||
| gate# getent passwd | gate# getent passwd | ||
| - | </code> | + | |
| - | * [[https://bugzilla.samba.org/show_bug.cgi?id=12176|Bug 12176 - wbinfo doesn't shows member users of a group any more]] | + | |
| - | <code> | + | |
| gate# getent group | gate# getent group | ||
| Line 166: | Line 163: | ||
| gate# chown -R user2:'domain users' /home/user2/ | gate# chown -R user2:'domain users' /home/user2/ | ||
| gate# chown user2 /var/mail/user2 | gate# chown user2 /var/mail/user2 | ||
| + | |||
| + | |||
| </code> | </code> | ||
сервис_winbind.txt · Last modified: 2024/05/29 07:16 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
