4 069
contributi
Samba e OpenLDAP: creare un controller di dominio con Debian Lenny: differenze tra le versioni
Vai alla navigazione
Vai alla ricerca
Samba e OpenLDAP: creare un controller di dominio con Debian Lenny (visualizza wikitesto)
Versione delle 17:57, 28 gen 2010
, 28 gen 2010→Configurazione di Samba
| Riga 1 118: | Riga 1 118: | ||
server string = DOMINOP PDC Server - Samba %v | server string = DOMINOP PDC Server - Samba %v | ||
case sensitive = No | case sensitive = No | ||
use kerberos keytab = yes | |||
use spnego = yes | |||
client NTLMv2 auth = yes | |||
username map = /etc/samba/usermap | |||
### Imposto il server come controller di dominio ### | ### Imposto il server come controller di dominio ### | ||
os level = | os level = 255 | ||
preferred master = yes | preferred master = yes | ||
local master = yes | local master = yes | ||
domain master = yes | domain master = yes | ||
domain logons = yes | domain logons = yes | ||
admin users = root addmachine @"Domain Admins" | |||
### Opzioni di connessione e sicurezza. Configurazione Wins ### | ### Opzioni di connessione e sicurezza. Configurazione Wins ### | ||
| Riga 1 136: | Riga 1 142: | ||
idmap uid = 10000-90000 | idmap uid = 10000-90000 | ||
idmap gid = 10000-90000 | idmap gid = 10000-90000 | ||
idmap backend = ldap: | idmap backend = ldap:ldaps://127.0.0.1 | ||
name resolve order = wins lmhosts host bcast | name resolve order = wins lmhosts host bcast | ||
dns proxy = | dns proxy = yes | ||
time server = yes | time server = yes | ||
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 | socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 | ||
keepalive = 20 | |||
preserve case = yes | |||
short preserve case = yes | |||
bind interfaces only = yes | |||
interfaces = bond0, lo | |||
### Configuro Winbind | ### Configuro Winbind | ||
| Riga 1 159: | Riga 1 171: | ||
log level = 2 | log level = 2 | ||
max log size = 50 | max log size = 50 | ||
debug level = 1 | |||
syslog = 0 | |||
utmp = Yes | |||
### Impostazione charset corretto ### | ### Impostazione charset corretto ### | ||
| Riga 1 166: | Riga 1 181: | ||
dos charset = UTF-8 | dos charset = UTF-8 | ||
display charset = UTF-8 | display charset = UTF-8 | ||
restrict anonymous = 0 | |||
panic action = /usr/share/samba/panic-action %d | panic action = /usr/share/samba/panic-action %d | ||
### Configurazione del supporto a LDAP ### | ### Configurazione del supporto a LDAP ### | ||
passdb backend = ldapsam: | passdb backend = ldapsam:ldaps://127.0.0.1 | ||
ldap admin dn = krb5PrincipalName=ldapmaster/admin@DOMINIO.LOCAL,ou=KerberosPrincipals,ou=Users,dc=dominio,dc=local | |||
ldap ssl = On | |||
ldapsam:trusted = yes | |||
ldap suffix = dc=dominio,dc=local | ldap suffix = dc=dominio,dc=local | ||
ldap machine suffix = ou=Computers | ldap machine suffix = ou=Computers | ||
| Riga 1 176: | Riga 1 195: | ||
ldap group suffix = ou=Groups | ldap group suffix = ou=Groups | ||
ldap idmap suffix = ou=Idmap | ldap idmap suffix = ou=Idmap | ||
enable privileges = yes | enable privileges = yes | ||
ldap delete dn = Yes | ldap delete dn = Yes | ||
| Riga 1 185: | Riga 1 203: | ||
pam password change = Yes | pam password change = Yes | ||
unix password sync = Yes | unix password sync = Yes | ||
pam password change = no | |||
### Profili mobili, directory home, script di logon ### | ### Profili mobili, directory home, script di logon ### | ||
| Riga 1 195: | Riga 1 214: | ||
passwd program = /usr/sbin/smbldap-passwd %u | passwd program = /usr/sbin/smbldap-passwd %u | ||
passwd chat = *New*password* %n\n *Retype*new*password* %n\n *all*authentication*token*updated* | passwd chat = *New*password* %n\n *Retype*new*password* %n\n *all*authentication*token*updated* | ||
add user script = /usr/sbin/smbldap-useradd -m "%u" | add user script = /usr/sbin/smbldap-useradd -m -a "%u" | ||
ldap delete dn = Yes | ldap delete dn = Yes | ||
delete user script = /usr/sbin/smbldap-userdel "%u" | delete user script = /usr/sbin/smbldap-userdel "%u" | ||
| Riga 1 214: | Riga 1 233: | ||
;printer admin = @sambaadmins | ;printer admin = @sambaadmins | ||
### Comando per loggare login e logoff (Legge amministratore di sistema) | |||
root preexec = /etc/samba/log_access_login.bash "%L" "%U" "%G" "%H" "%u" "%S" "%I" "%m" ON | |||
root postexec = /etc/samba/log_access_login.bash "%L" "%U" "%G" "%H" "%u" "%S" "%I" "%m" OFF | |||
### Condivisioni ### | ### Condivisioni ### | ||
| Riga 1 222: | Riga 1 245: | ||
path = /dominio/netlogon | path = /dominio/netlogon | ||
guest ok = no | guest ok = no | ||
writable = | writable = yes | ||
browseable = no | browseable = no | ||
share modes = no | share modes = no | ||
admin users = @"Domain Admins" | |||
### Percorso per i roaming profiles | ### Percorso per i roaming profiles | ||
| Riga 1 267: | Riga 1 291: | ||
guest ok = no | guest ok = no | ||
inherit permissions = yes | inherit permissions = yes | ||
admin users = %u | |||
write list = %u | |||
read list = %u | |||
create mask = 0700 | |||
directory mask = 0700 | |||
### Directory condivisa | ### Directory condivisa | ||