centos 6.x samba 加入windows 域.docxVIP

centos 6.x samba 加入windows 域软件需求：krb5-workstation-1.9-33.el6_3.2.x86_64krb5-libs-1.9-33.el6_3.2.x86_64krb5-devel-1.9-33.el6_3.2.x86_64pam_krb5-2.3.11-9.el6.x86_64samba-3.5.10-125.el6.x86_64samba-client-3.5.10-125.el6.x86_64samba-winbind-clients-3.5.10-125.el6.x86_64samba-winbind-3.5.10-125.el6.x86_64samba-common-3.5.10-125.el6.x86_64samba4-libs-4.0.0-23.alpha11.el6.x86_64编辑/etc/krb5.conf[libdefaults]?default_realm = EXAMPLE.COM?dns_lookup_realm = false?dns_lookup_kdc = false?ticket_lifetime = 24h?renew_lifetime = 7d?forwardable = true[realms]?EXAMPLE.COM?= {? kdc = IP:88?(domain controller ip) admin_server = IP:749 default_domain =?EXAMPLE.COM?}[domain_realm]?. =?EXAMPLE.COM? =?EXAMPLE.COM编辑/etc/nsswitch.confpasswd:???? files?winbindshadow:???? files?winbindgroup:????? files?winbind编辑/etc/resolv.confnameserver IP===========================================编辑/etc/hosts hostname编辑/etc/sysconfig/networkHOSTNAME=hostname============================================net_update_dns_internal: Failed to connect to our DC!DNS update failed!编辑/etc/samba/smb.conf#======================= Global Settings =====================================# ----------------------- Network Related Options -------------------------??workgroup = EXAMPLE server string = Samba Server Version %v netbios name = hostname# ----------------------- Domain Members Options ------------------------ security = ads passdb backend = tdbsam realm = password server = IP encrypt passwords = yes idmap uid =33554431 idmap gid =33554431 template shell = /bin/bash template homedir = /home/%U winbind use default domain = true winbind offline logon = true winbind enum groups = yes winbind enum users = yes winbind separator = /加入域 net ads join -U administrator离开域 net ads leave -U administrator加域前先ntpdate IP一下，与域控同步时间防止出错用域用户登录时如果出错，用setup命令检查下图选项是否已选择