3,430
edits
Changes
From Pumping Station One
creation of winbind setup howto
== Installation ==
sudo pacman -S krb5 samba
== /etc/nsswitch.conf ==
Add winbind to the passwd and group lines like so:
passwd: files winbind
group: files winbind
shadow: files
== /etc/krb5.conf ==
Set the default realm to AD.PUMPINGSTATIONONE.ORG (caps matter)
[libdefaults]
default_realm = AD.PUMPINGSTATIONONE.ORG
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes
== /etc/samba/smb.conf ==
[global]
workgroup = PS1
realm = AD.PUMPINGSTATIONONE.ORG
security = ADS
encrypt passwords = Yes
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind trusted domains only = No
winbind nss info = rfc2307
idmap config shortdomainname:range = 500-40000
idmap config shortdomainname:schema_mode = rfc2307
idmap config shortdomainname:backend = ad
idmap config *:range = 70001-80000
idmap config *:backend = tdb
template shell = /bin/bash
