COLOCAR DEBIAN NO DOMINIO AD

1. Instalar o Kerberos

apt-get install krb5-user

1. Alterar o arquivo /etc/nsswitch.conf mudando as informações abaixo:

passwd: compat winbind

group: compat winbind

shadow: compat winbind

hosts: files dns winbind

1. Configura o smb.conf e o /etc/krb5.conf (Confs abaixo).

    

2. Restartar o samba e o winbind

/etc/init.d/samba restart

/etc/init.d/winbind restart

1. Solicita um Ticket kerberos ao DC.

kinit administrator

1. Coloca a maquina no domínio:

net ads join -U administrator

1. Para testar digite:

   wbinfo -u (Vai listar os usuários)

   (Se não funcionar reinicie o winbind)

2. Beleza

3. vi /etc/init.d/winbind

   Localize o texto:

   chgrp winbindd_priv /var/run/samba/winbindd_privileged/ || return 1

   E altere para:

   chgrp proxy /var/run/samba/winbindd_privileged/ || return 1

   Reiniciando serviço do winbind:

   # /etc/init.d/winbind restart

• KRB5.CONF

[logging]

default = FILE:/var/log/krb5libs.log

kdc = FILE:/var/log/krb5kdc.log

admin_server = FILE:/var/log/kadmind.log

[libdefaults]

default_realm = DOMINIO.LOCAL

dns_lookup_realm = false

dns_lookup_kdc = false

ticket_lifetime = 24h

forwardable = yes

[realms]

DOMINIO.LOCAL = {

kdc = 192.168.10.1

}

SMB.CONF

#======================= Global Settings =====================================

[global]

workgroup = DOMINIO

server string = servidor_proxy

netbios name = servidor_proxy

encrypt passwords = yes

password server = 192.168.10.1

wins server = 192.168.10.1

# --------------------------- Logging Options -----------------------------

# logs split per machine

log file = /var/log/samba/log.%m

# max 50KB per log file, then rotate

max log size = 50

# ----------------------- Standalone Server Options ------------------------

security = ads

passdb backend = tdbsam

bind interfaces only = yes

winbind separator = /

winbind enum users = yes

winbind enum groups = yes

winbind use default domain = yes

winbind uid = 10000-20000

winbind gid = 10000-20000

#winbind separator = +

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

; security = domain

; passdb backend = tdbsam

realm = DOMINIO.LOCAL

; password server = <NT-Server-Name>

# ----------------------- Domain Controller Options ------------------------

#

load printers = yes

cups options = raw