On Fri, Jun 4, 2010 at 10:00 AM, Fergal O'Connell
<foconn...@curamsoftware.com> wrote:
> Considering we have this issue for approx 2 weeks now and not made any real 
> progress.
> I'll have to investigate setting the Security to ADS.

  It's not overly hard.  The procedure is basically:

1. Configure your Kerberos realm in /etc/krb5.conf
2. Change "security = ads" in /etc/samba/smb.conf
3. Restart smbd
4. Run: net ads join

  Here's a sample krb5.conf: http://pastebin.com/7RUGkZvU

  You need may to also have the "winbind" service running to maintain
the AD membership, although I'm not sure if it's winbind or smbd that
does that.  (We needed winbind for other things, so I don't know.)

  I found the Samba HOWTO on this was very good when I did this.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to