= Install Winbind for connecting AD on Ubuntu 10.10 > aptitude install samba winbind > vim /etc/samba/smb.conf [global] dos charset = CP932 unix charset = UTF-8 display charset = UTF-8 workgroup = JUNDEV security = ads realm = JUNDEV.TEST.COM password server = 192.168.100.196 log level = 1 log file = /var/log/samba/log.%m syslog = 0 winbind enum users = yes winbind enum groups = yes idmap backend = rid idmap uid = 10000-20000 idmap gid = 10000-20000 template homedir = /home/%D/%U template shell = /bin/bash winbind use default domain = yes encrypt passwords = true obey pam restrictions = yes dns proxy = no log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d > vim /etc/nsswitch.conf passwd: compat winbind group: compat winbind shadow: compat winbind hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 wins > vim /etc/krb5.conf [libdefaults] default_realm = JUNDEV.TEST.COM [realms] JUNDEV.TEST.COM = { kdc = 192.168.100.196 } [domain_realm] .jundev.test.com = JUNDEV.TEST.COM jundev.test.com = JUNDEV.TEST.COM [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log > vim /etc/hosts 192.168.100.196 jundev.test.com > vim /etc/resolv.conf search jundev.test.com nameserver 192.168.100.196 > net time set > net ads info > sudo /etc/init.d/winbind stop > service smbd stop > service nmbd stop > service nmbd start > service smbd start > sudo /etc/init.d/winbind start > net ads join -U Administrator (If not able to join, attach “-S jundev.test.com”) > reboot > wbinfo -u > wbinfo -g #Chceck AD > getent passwd > getent group > pam-auth-update > vim /etc/pam.d/common-session session required pam_mkhomedir.so skel=/etc/skel umask=0022 #Add > mkdir /home/JUNDEV > sysv-rc-conf smbd 2,3,4,5 nbmd 2,3,4,5 winbind 2,3,4,5