Linux加域.docVIP

Linux加域 说明:本文为LINUX加入WINDOWS域的具体情况作一些说明,关于如何加入到域,本文不再详述,仅提供一个配置样板,如果有不了解的,可以再查看相关文章. 　　*-====================-* 　　* Linux To Windows AD 　　*-====================-* 　　- 基本概念 　　* PDC - 主域控制器 　　* BDC - 备份域控制器 　　* KDC - 密钥颁发中心,Kerberos服务器 　　* PAM - 可插拨认证模块 　　* SRV - DNS服务资源记录 　　- 域模式 　　* PRC - LINUX以Windows2000/NT4样式加入到域中 　　* ADS - 活动目录,Windows2003,WindowsXP 　　* 混合 - 有最好的兼容性 　　- 软件包Sw 　　* Samba: yum install samba.* samba-common.* samba-winbind-client.* 　　* Winbind: yum install samba-winbind.* 　　* Samba4: yum install samba4.* ;A newer version of samba 　　* Kerberos5: yum install pam_krb5.* krb5-workstation.* krb5-libs.* 　　* ldconfig 　　* ldconfig -v | grep winbind 　　* ls /usr/lib/libnss_winbind.so 　　- 配置文件 　　- NSS: /etc/nsswitch.conf 　　; 指示系统如何查找系统配置文件 　　; ACTION=Modify 　　* password: files winbind 　　* group: files winbind 　　- Samba: /etc/smb.conf 　　; 与共享文件夹相关的配置 　　; DomainMode = ActiveDirectory 　　*-------------------------------* 　　[global] 　　client use spnego = no 　　server signing = auto 　　workgroup = CAMPUS 　　# The SHORT-DOMAIN name of your domain, you need to modify 　　wins support = yes 　　wins server = 　　# Controller of the domain, You need to modify it to your own 　　wins proxy = yes 　　security = ADS 　　# or AD,ADS,domain, DOMAIN is the RPC mode 　　acl compatibility = win2k 　　idmap uid =33554431 　　# Set based on your user count 　　idmap gid =33554431 　　password server = 　　# Domain Controller 　　map to guest = bad user 　　guest ok = no 　　realm = CAMPUS.COM 　　# You need to keep the same with file krb5.conf defined 　　# encrypt psswords = yes 　　# Encrypt PASS, not supported by some version of samba 　　winbind use default domain = yes 　　# winbind separator = % 　　template homedir = /home/%D/%U 　　# A mode 777 should be set on /home/%D 　　template shell = /bin/bash 　　[homes] 　　comment = %S 　　path =/home/%D/%S 　　writeable = yes 　　browsable = yes 　　; valid users = %S 　　valid users = CAMPUS/%S 　　*-------------------------------* 　　* Kerberos: /etc/krb5.conf 　　*------