June 2016
Intermediate to advanced
152 pages
3h 30m
English
In order to participate in an AD style domain, you must have the machine joined to the domain using Administrator credentials. This will create the machine's account within the database, and provide credentials to the system for querying the ldap server.
Samba, heimdal-clients, and winbind:
sudo apt-get install winbind
/etc/samba/smb.conf:[global]
workgroup = EXAMPLE
realm = ad.example.org
security = ads
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%U
template shell = /bin/bash
winbind use default domain = yes
sudo net ads join -U Administrator
Read now
Unlock full access