3,430
edits
Changes
Jump to navigation
Jump to search
Line 12:
Line 12: − === Ubuntu === − − sudo apt-get install krb5-user ntp samba winbind Line 20:
Line 17: − + + + + + + + + + Line 65:
Line 70: − + − + Line 105:
Line 110: + + + + + + + + + + + + + + + + + + + + + + +
→Installation
== Installation ==
== Installation ==
=== Arch Linux ===
=== Arch Linux ===
sudo pacman -S krb5 samba
sudo pacman -S krb5 samba
* Default Kerberos version 5 realm: AD.PUMPINGSTATIONONE.ORG
=== Debian ===
sudo apt-get install krb5-user libnss-winbind libpam-winbind ntp samba winbind
=== Ubuntu ===
sudo apt-get install krb5-user ntp samba winbind
* Default Kerberos version 5 realm: AD.PUMPINGSTATIONONE.ORG
== /etc/nsswitch.conf ==
== /etc/nsswitch.conf ==
== Join the domain ==
== Join the domain ==
Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, It will be pretty easy to convince the systems group to add you. Send an email to [mailto:[email protected] systems-subscribe] and the present you case.
Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, Join the [[Systems Group]] and ask.
sudo ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG
sudo net ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG
== /etc/pam.d/system-auth ==
== /etc/pam.d/system-auth ==
%domain\ admins ALL=(ALL:ALL) ALL
%domain\ admins ALL=(ALL:ALL) ALL
%PS1\\domain\ admins ALL=(ALL:ALL) ALL
Then make sure the file has proper permissions:
Then make sure the file has proper permissions:
sudo chmod 0440 /etc/sudoers.d/domain_admins
sudo chmod 0440 /etc/sudoers.d/domain_admins
== pam_mkhomdir.so ==
pam_mkhomdir is responsible for creating the home directory of users that don't have one. Without it you get the following message.
Could not chdir to home directory /home/PS1/username: No such file or directory
=== ubuntu ===
Create a file called /usr/share/pam-configs/my_mkhomedir:
Name: activate mkhomedir
Default: yes
Priority: 900
Session-Type: Additional
Session:
required pam_mkhomedir.so umask=0022 skel=/etc/skel
and then run:
sudo pam-auth-update
== /etc/lightdm/lightdm.conf ==
== /etc/lightdm/lightdm.conf ==