Authenticating off a Windows 2003 ADS DC with Samba/Winbind

[Mark Farmer]

On Tue, 16 Nov 2004 15:20:37 -0000, rafiq_maniar at dell.com
<rafiq_maniar at dell.com> wrote:
> 
> Has anyone successfully set up Winbind/Samba to authenticate off a W2K3 domain controller with FC3?
> 

Sure, this pc :-)

> I know there's a nice little GUI for it in the Authentication applet, but I'm not having any luck with either that
> or attempting to manually configuring it.
> 
> I'm not exactly looking for technical help here - there are more appropriate lists for that (i.e. samba-users) - so I haven't posted
> my config or logs or anything, but just wondering if anybody has gotten it functional with Fedora?

Main things are:
/etc/samba/smb.conf
/etc/pam.d/system/auth
authconfig - make sure you enable winbind authentication
check /etc/nsswitch - you should have have 'files winbind' for passwd,
shadow & group

Make sure smb & winbind are running:
service smb start
service winbind start

If all is well you should be able to join the domain with:
net ads join -S DOMAINCONTROLLERNAME -U administrator
You should no be prompted for the administrators password.

Shout if you need configs to look at.

-- 
Mark Farmer RHCT
Registered Linux User 353158