Developers guide

Chapter 5

Configuration 31

[global]

workgroup = DOMAIN

server string = pf_server_name

security = ads

passdb backend = tdbsam

realm = DOMAIN.NET

encrypt passwords = yes

winbind use default domain = yes

client NTLMv2 auth = yes

preferred master = no

domain master = no

local master = no

load printers = no

log level = 1 winbind:5 auth:3

For Debian and Ubuntu:

[global]

workgroup = DOMAIN

server string = Samba Server Version %v

security = ads

realm = DOMAIN.NET

password server = 192.168.1.1

domain master = no

local master = no

preferred master = no

winbind separator = +

winbind enum users = yes

winbind enum groups = yes

winbind use default domain = yes

winbind nested groups = yes

winbind refresh tickets = yes

template homedir = /home/%D/%U

template shell = /bin/bash

client use spnego = yes

client ntlmv2 auth = yes

encrypt passwords = yes

restrict anonymous = 2

log file = /var/log/samba/log.%m

max log size = 50

Issue a kinit and klist in order to get and verify the Kerberos token:

# kinit administrator

# klist

After that, you need to start samba, and join the machine to the domain:

# service smb start

# chkconfig --level 345 smb on

# net ads join -U administrator