This is an old revision of the document!
[gX:~] # /usr/local/etc/rc.d/samba stop [gX:~] # cat /etc/rc.conf … nmbd_enable="NO" smbd_enable="NO" winbindd_enable="YES" … [gX:~] # cd /usr/local/etc/
root@gX:~# /etc/init.d/samba stop root@gX:~# apt-get install winbind root@gX:~# cd /etc/samba
gX# cat smb.conf
[global] workgroup = ADX security = DOMAIN idmap uid = 20000-40000 idmap gid = 20000-40000 template homedir = /home/%U template shell = /bin/sh winbind cache time = 36 winbind use default domain = Yes winbind enum users = yes winbind enum groups = yes
gX# testparm Load smb config files from /usr/local/etc/smb.conf Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions
gX# net rpc join -U Administrator Administrators's password: Joined domain ADX
[gX:~] # /usr/local/etc/rc.d/samba start
root@gX:~# /etc/init.d/bind9 restart root@gX:~# /etc/init.d/winbind start
gX# ntlm_auth --username=uX password: NT_STATUS_OK: Success (0x0) gX# wbinfo -u ... gX# wbinfo -g ...
gX# cat /etc/nsswitch.conf … group: files winbind passwd: files winbind shadow: files winbind # for linux only … gX# wbinfo –n uX gX# wbinfo –S … gX# id uX gX# chown -R uX:'domain users' /home/uX
[gX:~] # cat /etc/pam.d/sshd ... auth sufficient /usr/local/lib/pam_winbind.so auth required pam_unix.so no_warn try_first_pass
root@gX:~# more /etc/pam.d/sshd ... auth sufficient /lib/security/pam_winbind.so # Standard Un*x authentication. ...