= Install Winbind for connecting AD on Ubuntu 10.10

> aptitude install samba winbind

> vim /etc/samba/smb.conf
[global]
dos charset = CP932
unix charset = UTF-8
display charset = UTF-8
workgroup = JUNDEV
security = ads
realm = JUNDEV.TEST.COM
password server = 192.168.100.196
log level = 1
log file = /var/log/samba/log.%m
syslog = 0
winbind enum users = yes
winbind enum groups = yes
idmap backend = rid
idmap uid = 10000-20000
idmap gid = 10000-20000
template homedir = /home/%D/%U
template shell = /bin/bash
winbind use default domain = yes
encrypt passwords = true
obey pam restrictions = yes
dns proxy = no
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d

> vim /etc/nsswitch.conf
passwd: compat winbind
group: compat winbind
shadow: compat winbind

hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 wins

> vim /etc/krb5.conf
[libdefaults]
default_realm = JUNDEV.TEST.COM

[realms]
JUNDEV.TEST.COM = {
kdc = 192.168.100.196
}

[domain_realm]
.jundev.test.com = JUNDEV.TEST.COM
jundev.test.com = JUNDEV.TEST.COM

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

> vim /etc/hosts
192.168.100.196 jundev.test.com

> vim /etc/resolv.conf
search jundev.test.com
nameserver 192.168.100.196

> net time set
> net ads info

> sudo /etc/init.d/winbind stop
> service smbd stop
> service nmbd stop
> service nmbd start
> service smbd start
> sudo /etc/init.d/winbind start
> net ads join -U Administrator (If not able to join, attach “-S jundev.test.com”)
> reboot

> wbinfo -u
> wbinfo -g

#Chceck AD
> getent passwd
> getent group

> pam-auth-update
> vim /etc/pam.d/common-session
session required pam_mkhomedir.so skel=/etc/skel umask=0022 #Add

> mkdir /home/JUNDEV

> sysv-rc-conf
smbd 2,3,4,5
nbmd 2,3,4,5
winbind 2,3,4,5