Samba e OpenLDAP: creare un controller di dominio con Debian Etch: differenze tra le versioni

Samba e OpenLDAP: creare un controller di dominio con Debian Etch (visualizza wikitesto)

Versione delle 10:09, 19 set 2008

559 byte aggiunti , 19 set 2008

→‎Unire un server Samba al dominio

Ferdybassi

Burocrati, Amministratori

4 069

contributi

@@ Riga 984: / Riga 984: @@
 <pre>
 [global]
-    security = domain
+    # Impostazioni per il dominio
-   workgroup = DOMINIO
+     security = domain
-   realm = DOMINIO.LOCAL
+     workgroup = DOMINIO
-   server string = Server Samba
+     realm = DOMINIO.LOCAL
-   netbios name = FILESERVER
+     server string = Server Samba
-    username map = /etc/samba/smbusers
+     netbios name = FILESERVER
-   log level = 1
-    syslog = 0
+    # Impostazioni Wins e DNS
-   log file = /var/log/samba/%m
+     wins server = 10.0.0.11
-   max log size = 50
+     dns proxy = no
-   ldap ssl = No
+     name resolve order = wins hosts bcast
-   idmap uid = 10000-20000
-   idmap gid = 10000-20000
+    # Impostazioni LDAP e utenti
-   template primary group = "Domain Users"
+     ldap suffix = dc=dominio,dc=local
-   template shell = /bin/bash
+     ldap machine suffix = ou=machines
-   winbind separator = +
+     ldap group suffix = ou=groups
-   password server = server
+     ldap user suffix = ou=users
-   winbind use default domain = Yes
+     ldap idmap suffix = ou=idmap
-   encrypt passwords = yes
+     ldap admin dn=cn=admin,dc=dominio,dc=local
-    idmap uid = 10000-20000
+     idmap backend = ldap:"ldap://10.0.0.11"
-   idmap gid = 10000-20000
+     winbind enum users = yes
-    winbind enum users = yes
+     winbind enum groups = yes
-   winbind enum groups = yes
+     winbind separator = +
+     password server = server
+     winbind use default domain = Yes
+     encrypt passwords = yes
+   # Samba LOG
+     syslog = 0
+     log level = 3 passdb:1 auth:1 winbind:1
+     panic action = /usr/share/samba/panic-action %d
+     max log size = 1000
+     log file = /var/log/samba/log.%m
+     template primary group = "Domain Users"
+    # Files/Directories
+     map acl inherit = yes
+     case sensitive = no
+     directory mask = 0770
+     hide unreadable = yes
 [condivisione]
-comment = Dati Condivisi
+     comment = Dati Condivisi
-path = /dominio/dati
+     path = /dominio/dati
-valid users = @"Domain Users"
+     valid users = @"Domain Users"
-writeable = Yes
+     writeable = Yes
-browseable = Yes
+     browseable = Yes
 </pre>
 Fare ripartire Samba con: