Frage Linux Samba

gelöst Zusammenhang zwischen SAMBA, WINBIND, KERBEROS, PAM, ntlm auth und Active Directory

[global] 

        workgroup = IAS  

        netbios name = TESTSRV 

        realm = IAS.DE  

        idmap uid = 10000-59999 

        idmap gid = 10000-59901 

     # winbind separator = / 

        winbind use default domain = Yes 

        security = ADS 

        encrypt passwords = true 

        password server = * 

        log level = 1 

        idmap backend = ad 

        template shell = /bin/bash 

        client use spnego = yes 

**Konfiguration krb5.conf** 

[libdefaults] 

        default_realm = IAS.DE 

	default_tkt_enctypes = aes128-cts des3-cbc-sha1 rc4-hmac des-cbc-md5 des-cbc-crc 

	default_tgs_enctypes = aes128-cts des3-cbc-sha1 rc4-hmac des-cbc-md5 des-cbc-crc 

	permitted_enctypes = aes128-cts des3-cbc-sha1 rc4-hmac des-cbc-md5 des-cbc-crc 

        clockskew = 300 

[domain_realm] 

        .ias.de = IAS.DE 

[logging] 

#      default = SYSLOG:NOTICE:DAEMON 

        default = FILE:/var/log/krb5libs.log 

        kdc = FILE:/var/log/kdc.log 

        kadmind = FILE:/var/log/kadmind.log 

[appdefaults] 

        pam = { 

                ticket_lifetime = 1d 

                renew_lifetime = 1d 

                forwardable = true 

                proxiable = false 

                retain_after_close = false 

                minimum_uid = 0 

                debug = false 

        } 

net join -I <IP-des-Domaincontrollers> -U <Domänenadministrator>