Download Red Hat NETWORK 4.1.0 - Developers guide

Chapter 5
[global]
workgroup = DOMAIN
server string = pf_server_name
security = ads
passdb backend = tdbsam
realm = DOMAIN.NET
encrypt passwords = yes
winbind use default domain = yes
client NTLMv2 auth = yes
preferred master = no
domain master = no
local master = no
load printers = no
log level = 1 winbind:5 auth:3
For Debian and Ubuntu:
[global]
workgroup = DOMAIN
server string = Samba Server Version %v
security = ads
realm = DOMAIN.NET
password server = 192.168.1.1
domain master = no
local master = no
preferred master = no
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind nested groups = yes
winbind refresh tickets = yes
template homedir = /home/%D/%U
template shell = /bin/bash
client use spnego = yes
client ntlmv2 auth = yes
encrypt passwords = yes
restrict anonymous = 2
log file = /var/log/samba/log.%m
max log size = 50
Issue a kinit and klist in order to get and verify the Kerberos token:
# kinit administrator
# klist
After that, you need to start samba, and join the machine to the domain:
# service smb start
# chkconfig --level 345 smb on
# net ads join -U administrator
Copyright © 2008-2013 Inverse inc.
Configuration
31