linux加域（Linux add field）.docVIP

linux加域（Linux add field） Description: This article describes some of the details of LINUXs entry into the WINDOWS domain. As to how to add to the domain, this article is no longer detailed. It only provides a configuration template. If you dont understand it, you can check the relevant articles again *-====================-* * Linux, To, Windows, AD *-====================-* - Basic Concepts * PDC - primary domain controller * BDC - backup domain controller * KDC - key issuing center, Kerberos server * PAM - pluggable authentication module * SRV - DNS service resource record Domain model * PRC - LINUX is added to the domain in Windows2000/NT4 style * ADS - active directory, Windows2003, WindowsXP * mix - with the best compatibility - software package Sw * Samba:, yum, install, samba.*, samba-common.*, samba-winbind-client.* * Winbind:, yum, install, samba-winbind.* * Samba4:, yum, install, samba4.*, A, newer, version, of, samba * Kerberos5:, yum, install, pam_krb5.*, krb5-workstation.*, krb5-libs.* * ldconfig * ldconfig -v grep winbind | * ls /usr/lib/libnss_winbind.so - configuration file - NSS: /etc/nsswitch.conf Indicates how the system looks for the system configuration file ACTION=Modify * password:, files, winbind * group:, files, winbind - Samba: /etc/smb.conf Configuration associated with a shared folder DomainMode = ActiveDirectory *-------------------------------* [global] Client, use, SPNEGO = no Server signing = Auto Workgroup = CAMPUS The SHORT-DOMAIN name of your domain #, you need to modify Wins support = yes Wins server = # Controller of the domain, You need to modify it to your own Wins proxy = yes Security = ADS # or AD, ADS, domain, DOMAIN is the RPC mode ACL compatibility = Win2K Idmap uid =33554431 Set based on your user count # Idmap GID =33554431 Password server = # Domain Controller Map to guest = bad user Guest OK = no Realm = CAMPUS.COM Need to keep the # You same with file krb5.conf defined # encrypt psswords = yes # E