LinuxにおけるActive Directory Domain のメンバに参加手順 Domain TEST.JP

薔薇

1.Ubuntu系の場合
・/etc/resolv.conf
mv /etc/resolv.conf /etc/resolv.conf0
cat /etc/resolv.conf
domain test.jp
nameserver 192.168.1.7 →domain ip
nameserver 192.168.1.1
・/etc/krb5.conf
最初に krb5-userをinstallしておく
rm /etc/krb5.conf
cat /etc/krb5.conf
[libdefaults]
default_realm = TEST.JP
dns_lookup_realm = false
dns_lookup_kdc = true
[realms]
TEST.JP = {
Kdc = 2604
}
[domain_realm]
test.jp = TEST.JP
.test.jp = TEST.JP
・/etc/samba/sm.conf
cat ・/etc/samba/sm.conf
[global]
workgroup = TEST
password server = 2604
realm = TEST.JP
security = ads
idmap config * : range = 16777216-33554431
template homedir = /home/%U
template shell = /bin/bash
winbind use default domain = false
winbind offline logon = false
[netlogon]
path = /var/db/samba4/sysvol/test.jp/scripts
read only = No
[sysvol]
path = /var/db/samba4/sysvol
read only = No

2.rhel系 他
・cat /etc/resolv.conf
# Generated by NetworkManager
domain test.jp
nameserver 192.168.1.7 →domain ip
nameserver 192.168.1.1
・cat /etc/krb5.conf
[libdefaults]
default_realm = TEST.JP
dns_lookup_realm = false
dns_lookup_kdc = true
[realms]
TEST.JP = {
Kdc = rhel10
}
[domain_realm]
test.jp = TEST.JP
.test.jp = TEST.JP
cat ・/etc/samba/sm.conf
[global]
workgroup = TEST
password server = rhel10
realm = TEST.JP
security = ads
idmap config * : range = 16777216-33554431
template homedir = /home/%U
template shell = /bin/bash
winbind use default domain = false
winbind offline logon = false
[netlogon]
path = /var/db/samba4/sysvol/test.jp/scripts
read only = No
[sysvol]
path = /var/db/samba4/sysvol
read only = No

カテゴリー: 未分類 パーマリンク

コメントを残す

メールアドレスが公開されることはありません。 ※ が付いている欄は必須項目です