diff options
Diffstat (limited to 'docs/htmldocs/ads.html')
-rw-r--r-- | docs/htmldocs/ads.html | 64 |
1 files changed, 26 insertions, 38 deletions
diff --git a/docs/htmldocs/ads.html b/docs/htmldocs/ads.html index 49345be2c0..26ec1d04a7 100644 --- a/docs/htmldocs/ads.html +++ b/docs/htmldocs/ads.html @@ -5,7 +5,8 @@ >Samba as a ADS domain member</TITLE ><META NAME="GENERATOR" -CONTENT="Modular DocBook HTML Stylesheet Version 1.77"><LINK +CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+ +"><LINK REL="HOME" TITLE="SAMBA Project Documentation" HREF="samba-howto-collection.html"><LINK @@ -72,14 +73,10 @@ WIDTH="100%"></DIV CLASS="CHAPTER" ><H1 ><A -NAME="ADS" -></A ->Chapter 9. Samba as a ADS domain member</H1 +NAME="ADS">Chapter 8. Samba as a ADS domain member</H1 ><P ->This is a VERY ROUGH guide to setting up the current (November 2001) -pre-alpha version of Samba 3.0 with kerberos authentication against a -Windows2000 KDC. The procedures listed here are likely to change as -the code develops.</P +>This is a rough guide to setting up Samba 3.0 with kerberos authentication against a +Windows2000 KDC. </P ><P >Pieces you need before you begin: <P @@ -113,9 +110,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1203" -></A ->9.1. Installing the required packages for Debian</H1 +NAME="AEN1187">8.1. Installing the required packages for Debian</H1 ><P >On Debian you need to install the following packages: <P @@ -142,9 +137,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1209" -></A ->9.2. Installing the required packages for RedHat</H1 +NAME="AEN1193">8.2. Installing the required packages for RedHat</H1 ><P >On RedHat this means you should have at least: <P @@ -180,9 +173,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1218" -></A ->9.3. Compile Samba</H1 +NAME="AEN1202">8.3. Compile Samba</H1 ><P >If your kerberos libraries are in a non-standard location then remember to add the configure option --with-krb5=DIR.</P @@ -206,13 +197,22 @@ CLASS="PROGRAMLISTING" ><PRE CLASS="PROGRAMLISTING" > realm = YOUR.KERBEROS.REALM - ads server = your.kerberos.server security = ADS encrypt passwords = yes</PRE ></P ><P ->Strictly speaking, you can omit the realm name and you can use an IP - address for the ads server. In that case Samba will auto-detect these.</P +>In case samba can't figure out your ads server using your realm name, use the +<B +CLASS="COMMAND" +>ads server</B +> option in <TT +CLASS="FILENAME" +>smb.conf</TT +>: +<PRE +CLASS="PROGRAMLISTING" +> ads server = your.kerberos.server</PRE +></P ><P >You do *not* need a smbpasswd file, although it won't do any harm and if you have one then Samba will be able to fall back to normal @@ -225,9 +225,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1230" -></A ->9.4. Setup your /etc/krb5.conf</H1 +NAME="AEN1217">8.4. Setup your /etc/krb5.conf</H1 ><P >The minimal configuration for krb5.conf is:</P ><P @@ -264,9 +262,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1240" -></A ->9.5. Create the computer account</H1 +NAME="AEN1227">8.5. Create the computer account</H1 ><P >Do a "kinit" as a user that has authority to change arbitrary passwords on the KDC ("Administrator" is a good choice). Then as a @@ -281,9 +277,7 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1244" -></A ->9.5.1. Possible errors</H2 +NAME="AEN1231">8.5.1. Possible errors</H2 ><P ><P ></P @@ -312,9 +306,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1256" -></A ->9.6. Test your server setup</H1 +NAME="AEN1243">8.6. Test your server setup</H1 ><P >On a Windows 2000 client try <B CLASS="COMMAND" @@ -332,9 +324,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1261" -></A ->9.7. Testing with smbclient</H1 +NAME="AEN1248">8.7. Testing with smbclient</H1 ><P >On your Samba server try to login to a Win2000 server or your Samba server using smbclient and kerberos. Use smbclient as usual, but @@ -345,9 +335,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1264" -></A ->9.8. Notes</H1 +NAME="AEN1251">8.8. Notes</H1 ><P >You must change administrator password at least once after DC install, to create the right encoding types</P |