LINUX加入域
注意linux主机hostname不能使用“_”vi /etc/sysconfig/network
NETWORKING_IPV6=no
HOSTNAME=dcclient.jyco.local
NETWORKING=yes
vi /etc/hosts
127.0.0.1dcclient.jyco.localdcclient
yum install samba-*
yum install krb5
yum install pam_krb5_x86_64
vi /etc/resolv.conf
nameserver 192.168.9.99
reboot
vi /etc/samba/smb.conf
workgroup = JYCO
realm = JYCO.LOCAL
server string = Samba Server Version %v
security = ADS
password server = 192.168.9.99
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template homedir = /home/%U
template shell = /bin/bash
winbind separator = /
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind offline logon = Yes
cups options = raw
cat /etc/krb5.conf
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
default_realm = JYCO.LOCAL
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
forwardable = yes
#
# EXAMPLE.COM = {
# kdc = kerberos.example.com:88
# admin_server = kerberos.example.com:749
# default_domain = example.com
# }
JYCO.LOCAL = {
kdc = 192.168.9.99:88
admin_server = 192.168.9.99:749
default_domain = jyco.local
}
# JYCO.LOCAL = {
# kdc = 192.168.9.99:88
# kdc = 192.168.9.99
# }
# .example.com = EXAMPLE.COM
# example.com = EXAMPLE.COM
jyco.local = JYCO.LOCAL
.jyco.local = JYCO.LOCAL
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
net ads join -U admin@JYCO.LOCAL
域用户登陆linux机器需同步adserver时间 ntpdate 192.168.9.99
自动创建目录 vi /etc/pam.d/system-authsession字段前添加
session required pam_mkhomedir.so silent skel=/etc/skel umask=0077
以上配置domian admins没有sudo权限！
页:
[1]