centos加进windos域[精品].docVIP

在加入域之前: 检查本地连接和DNS 修改关键性质的3个文件 修改 /etc/samba/smb.conf [root@centos ~]# vi /etc/samba/smb.conf 内容如下; #======================= Global Settings ===================== # workgroup = XUANBO #域名 realm = XUANBO.COM #域名 security = ADS password server = 9 #DC地址 interfaces = eth0 #网卡接口 bind interfaces only = true printing = cpus printcap name = cpus load printers = yes server string = Samba Server Version %v ……………………………………………………………… #============================ Share Definitions ============= idmap uid =33554431 idmap gid =33554431 template shell = /sbin/nologin template homedir = /homes/%D/%U winbind use default domain = yes password server = 9 realm = XUANBO.COM winbind separator = % winbind enum users = yes winbind enum groups = yes encrypt passwords = yes [homes] comment = Home Directories path = /homes/%D/%U valid users =/%D/%U browseable = no writable = yes 修改/etc/nsswitch.conf [root@centos ~]# vi /etc/nsswitch.conf 内容如下： passwd: files winbind shadow: files winbind group: files winbind 修改/etc/krb5.conf [root@centos ~]#vi /etc/krb5.conf 内容如下： [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = XUANBO.COM dns_lookup_realm = false dns_lookup_kdc = false ticket_lifetime = 24h forwardable = yes [realms] EXAMPLE.COM = { kdc = 9:88 admin_server = 9:749 default_domain = kdc = 9 } [domain_realm] . = XUANBO.COM = XUANBO.COM [kdc] profile = /var/kerberos/krb5kdc/kdc.conf [appdefaults] pam = { debug = false ticket_lifetime = 36000 renew_lifetime = 36000 forwardable = true krb4_convert = false } 加入域： [root@centos ~]#net rpc join -S -U administrator Password: Joined domain XUANBO. [root@centos ~]# wbinfo -u administrator guest krbtgt vpn [root@centos ~]# wbinfo -g BUILTIN%administrators