Dotaz: samba v domene pripojena ale neoveruje

[ferda]

Mam server prihlaseny do domeny, na wbinfo reaguje "souhlasne" ale samba neoveri uzivatele . Testoval jsem security ADS i DOMAIN.V logu je "ads_connect for domain *** failed: Decoding error" Nekde neco prehlizim - poradi nekdo?

Odpovědi

[anon123]

Chtelo by to alespon konfigurak samby.

[ferda]

[global]
workgroup = NDM.CZ
realm = NDM.CZ
server string = Samba
security = ADS
map to guest = Bad User
printcap name = cups
domain master = No
wins server = 172.16.0.4
ldap ssl = start tls
ldap timeout = 5
usershare max shares = 100
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
winbind refresh tickets = Yes
valid users = "@NDMC.Z\Domain Users"
cups options = raw



krb5

[libdefaults]
default_realm = ndm.cz
clockskew = 300
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
ndm.cz = {
kdc = 172.16.0.4
default_domain = ndm.cz
admin_server = 172.16.0.4
}
[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb5lib.log
[domain_realm]
.jmeno.ad_domeny = ndm.cz
jmeno.ad_domeny = ndm.cz
.ndm.cz = ndm.cz
[appdefaults]
pam = {
ticket_lifetime = 1d
renew_lifetime = 1d
forwardable = true
proxiable = false
retain_after_close = false
minimum_uid = 0
try_first_pass = true
krb4_convert = false
use_shmem = sshd
}

[ferda]

Mel jsem nastaveno i overovani uzivatelu systemu proti domene a to se nejak nemelo rado. Takze problem se sambou je vyresen a pokud mi zde nekdo vysvetli, proc nemuzu pouzit zaroven overovani samby i systemovych uzivatelu proti AD, tak budu jen rad.