This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
ntlm_аутентификация_в_microsoft_ad [2010/10/01 16:49] val |
— (current) | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== NTLM аутентификация в Microsoft AD ====== | ||
| - | ===== Настройка службы winbindd ===== | ||
| - | |||
| - | ==== FreeBSD ==== | ||
| - | <code> | ||
| - | [gate:~] # /usr/local/etc/rc.d/samba stop | ||
| - | |||
| - | [gate:~] # cat /etc/rc.conf | ||
| - | … | ||
| - | nmbd_enable="NO" | ||
| - | smbd_enable="NO" | ||
| - | winbindd_enable="YES" | ||
| - | … | ||
| - | |||
| - | [gate:~] # cd /usr/local/etc/ | ||
| - | </code> | ||
| - | ==== Ubuntu (8.04) ==== | ||
| - | <code> | ||
| - | root@gate:~# /etc/init.d/samba stop | ||
| - | </code> | ||
| - | |||
| - | ==== Ubuntu (10.04) ==== | ||
| - | <code> | ||
| - | root@gate:~# stop nmbd | ||
| - | root@gate:~# stop smbd | ||
| - | </code> | ||
| - | |||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | root@gate:~# apt-get install winbind | ||
| - | |||
| - | root@gate:~# cd /etc/samba | ||
| - | </code> | ||
| - | |||
| - | ==== FreeBSD/Ubuntu ==== | ||
| - | <code> | ||
| - | gate# cat smb.conf | ||
| - | </code><code> | ||
| - | [global] | ||
| - | workgroup = CORPX | ||
| - | security = DOMAIN | ||
| - | </code> | ||
| - | |||
| - | ===== Регистрация unix в домене ===== | ||
| - | |||
| - | !!! winbind лучше остановить | ||
| - | |||
| - | <code> | ||
| - | gate# net rpc join -U Administrator | ||
| - | Administrators's password: | ||
| - | Joined domain CORPX | ||
| - | </code> | ||
| - | |||
| - | ===== Запуск службы winbindd ===== | ||
| - | |||
| - | ==== FreeBSD ==== | ||
| - | <code> | ||
| - | [gate:~] # /usr/local/etc/rc.d/samba start | ||
| - | </code> | ||
| - | |||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | root@gate:~# /etc/init.d/winbind restart | ||
| - | </code> | ||
| - | |||
| - | ==== Проверки ==== | ||
| - | <code> | ||
| - | gate# ntlm_auth --username=user1 | ||
| - | password: | ||
| - | NT_STATUS_OK: Success (0x0) | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка библиотеки pam на использование winbind ===== | ||
| - | |||
| - | ==== FreeBSD ==== | ||
| - | <code> | ||
| - | [gate:~] # cat /etc/pam.d/sshd | ||
| - | ... | ||
| - | auth sufficient /usr/local/lib/pam_winbind.so | ||
| - | auth required pam_unix.so no_warn try_first_pass | ||
| - | </code> | ||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | root@gate:~# apt-get install libpam-modules | ||
| - | |||
| - | root@gate:~# more /etc/pam.d/sshd | ||
| - | ... | ||
| - | auth sufficient pam_winbind.so | ||
| - | # Standard Un*x authentication. | ||
| - | ... | ||
| - | </code> | ||