From 09fb00c629ed81b25c97a5eb74df4e03c92145ea Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Tue, 5 Nov 2002 21:41:04 +0000 Subject: 'make everything' in docs (This used to be commit 960082d860c36419c63094be778decdadb061c1d) --- docs/htmldocs/winbind.html | 147 ++++++++++++++++++++++++--------------------- 1 file changed, 77 insertions(+), 70 deletions(-) (limited to 'docs/htmldocs/winbind.html') diff --git a/docs/htmldocs/winbind.html b/docs/htmldocs/winbind.html index cbec6e39a6..016d77cac1 100644 --- a/docs/htmldocs/winbind.html +++ b/docs/htmldocs/winbind.html @@ -9,12 +9,15 @@ CONTENT="Modular DocBook HTML Stylesheet Version 1.77">PrevNextChapter 10. Unified Logons between Windows NT and UNIX using WinbindChapter 16. Unified Logons between Windows NT and UNIX using Winbind

10.1. Abstract

16.1. Abstract

Integration of UNIX and Microsoft Windows NT through a unified logon has been considered a "holy grail" in heterogeneous @@ -104,9 +107,9 @@ CLASS="SECT1" >

10.2. Introduction

16.2. Introduction

It is well known that UNIX and Microsoft Windows NT have different models for representing user and group information and @@ -158,9 +161,9 @@ CLASS="SECT1" >

10.3. What Winbind Provides

16.3. What Winbind Provides

Winbind unifies UNIX and Windows NT account management by allowing a UNIX box to become a full member of a NT domain. Once @@ -200,9 +203,9 @@ CLASS="SECT2" >

10.3.1. Target Uses

16.3.1. Target Uses

Winbind is targeted at organizations that have an existing NT based domain infrastructure into which they wish @@ -224,9 +227,9 @@ CLASS="SECT1" >

10.4. How Winbind Works

16.4. How Winbind Works

The winbind system is designed around a client/server architecture. A long running

10.4.1. Microsoft Remote Procedure Calls

16.4.1. Microsoft Remote Procedure Calls

Over the last two years, efforts have been underway by various Samba Team members to decode various aspects of @@ -270,9 +273,9 @@ CLASS="SECT2" >

10.4.2. Name Service Switch

16.4.2. Name Service Switch

The Name Service Switch, or NSS, is a feature that is present in many UNIX operating systems. It allows system @@ -350,9 +353,9 @@ CLASS="SECT2" >

10.4.3. Pluggable Authentication Modules

16.4.3. Pluggable Authentication Modules

Pluggable Authentication Modules, also known as PAM, is a system for abstracting authentication and authorization @@ -399,9 +402,9 @@ CLASS="SECT2" >

10.4.4. User and Group ID Allocation

16.4.4. User and Group ID Allocation

When a user or group is created under Windows NT is it allocated a numerical relative identifier (RID). This is @@ -425,9 +428,9 @@ CLASS="SECT2" >

10.4.5. Result Caching

16.4.5. Result Caching

An active system can generate a lot of user and group name lookups. To reduce the network cost of these lookups winbind @@ -448,9 +451,9 @@ CLASS="SECT1" >

10.5. Installation and Configuration

16.5. Installation and Configuration

Many thanks to John Trostel

10.5.1. Introduction

16.5.1. Introduction

This HOWTO describes the procedures used to get winbind up and running on my RedHat 7.1 system. Winbind is capable of providing access @@ -534,9 +537,9 @@ CLASS="SECT2" >

10.5.2. Requirements

16.5.2. Requirements

If you have a samba configuration file that you are currently using... back to the original state they were in if you get frustrated with the way things are going. ;-)

The latest version of SAMBA (version 2.2.2 as of this writing), now +>The latest version of SAMBA (version 3.0 as of this writing), now includes a functioning winbindd daemon. Please refer to the

10.5.3. Testing Things Out

16.5.3. Testing Things Out

Before starting, it is probably best to kill off all the SAMBA related daemons running on your server. Kill off all

10.5.3.1. Configure and compile SAMBA

16.5.3.1. Configure and compile SAMBA

The configuration and compilation of SAMBA is pretty straightforward. The first three steps may not be necessary depending upon @@ -715,9 +718,9 @@ CLASS="SECT3" >

10.5.3.2. Configure 16.5.3.2. Configure nsswitch.conf and the @@ -820,9 +823,9 @@ CLASS="SECT3" >

10.5.3.3. Configure smb.conf

16.5.3.3. Configure smb.conf

Several parameters are needed in the smb.conf file to control the behavior of

10.5.3.4. Join the SAMBA server to the PDC domain

16.5.3.4. Join the SAMBA server to the PDC domain

Enter the following command to make the SAMBA server join the PDC domain, where root# /usr/local/samba/bin/net rpc join -s PDC -U Administrator/usr/local/samba/bin/net rpc join -S PDC -U Administrator

The proper response to the command should be: "Joined the domain @@ -941,9 +944,9 @@ CLASS="SECT3" >

10.5.3.5. Start up the winbindd daemon and test it!

16.5.3.5. Start up the winbindd daemon and test it!

Eventually, you will want to modify your smb startup script to automatically invoke the winbindd daemon when the other parts of @@ -1064,17 +1067,17 @@ CLASS="SECT3" >

10.5.3.6. Fix the init.d startup scripts

16.5.3.6. Fix the init.d startup scripts

10.5.3.6.1. Linux

16.5.3.6.1. Linux

The

10.5.3.6.2. Solaris

16.5.3.6.2. Solaris

On solaris, you need to modify the

10.5.3.6.3. Restarting

16.5.3.6.3. Restarting

If you restart the

10.5.3.7. Configure Winbind and PAM

16.5.3.7. Configure Winbind and PAM

If you have made it this far, you know that winbindd and samba are working together. If you want to use winbind to provide authentication for other @@ -1321,9 +1324,9 @@ CLASS="SECT4" >

10.5.3.7.1. Linux/FreeBSD-specific PAM configuration

16.5.3.7.1. Linux/FreeBSD-specific PAM configuration

The

10.5.3.7.2. Solaris-specific configuration

16.5.3.7.2. Solaris-specific configuration

The /etc/pam.conf needs to be changed. I changed this file so that my Domain users can logon both locally as well as telnet.The following are the changes @@ -1537,9 +1540,9 @@ CLASS="SECT1" >

10.6. Limitations

16.6. Limitations

Winbind has a number of limitations in its current released version that we hope to overcome in future @@ -1578,9 +1581,9 @@ CLASS="SECT1" >

10.7. Conclusion

16.7. Conclusion

The winbind system, through the use of the Name Service Switch, Pluggable Authentication Modules, and appropriate @@ -1606,7 +1609,7 @@ WIDTH="33%" ALIGN="left" VALIGN="top" >PrevNextsecurity = domain in Samba 2.xSecurity levels UpHow to Configure Samba 2.2 as a Primary Domain ControllerPassdb MySQL plugin