Connecting Fedora into Win2003 Domain

Posted on 2004-11-01
Medium Priority
Last Modified: 2013-12-06
I am a complete newbie to Linux, so you guys will have to be patient with me!  I have got linux set up, networking is fine,I can map to shares on my other machines OK. I would like to know if my Linux box can 'join' my 2003 domain? Also by joining the domain will I be able to log into linux using my domains username/pass?
Question by:craigja
LVL 38

Expert Comment

ID: 12468655

   You need to setup "Samba" to do it.
   However, it is not really "join" the Windows active directory as the other Windows PC do. But you can set your Linux password
sync with Windows server's.

   Please check the URL for more details:


Expert Comment

ID: 12475451
The linux box does join the domain because it has to be authentified in the Domain Controller with Kerberos, this adds a new "pc" in the Domain.

You must have these installed:

* kerberos client (http://web.mit.edu/kerberos/www)
* samba server with winbind (www.samba.org)
* samba client (www.samba.org. usually your linux box has this installed)

These files must be edited:

** krb5.conf
You must specify your REALM, IP parameters and the Domain. The krb5.conf file has author's comnments about how to do this.

Add "winbind" in the passwd, group, host lines. This for the domain accounts mapping into the linux box.
passwd files winbind
group files winbind
host file dns winbind

workgroup = domain logon name (e.g. you can have a companydomain.com domain with a logon workgroup of company-domain-server)
security = ads if you have Active Directory or set to domain if you have another one
realm = must be the realm
password server = *
encript password = yes
winbind separator = +
id map key gid = 10000-20000
winbin enum users = yes
winbind enum group = yes
template home dir = /home/win/%U ("win" can be changed, is just an example)
template shell = /bin/bash (or your preferred shell)

Then you do: (as root. indicated by the # symbol)
# netads -s YOUR_DC_IP join

You have your computer in the domain and you have the domain account mapped into your system

you can type:

# getent passwd
and see your domain accounts for verification

NOTE: The smb.conf options aren't the exact name. Just to give you an idea.

I MAY have an err. That's the way it should be done as I can remember.

Expert Comment

ID: 12475523
For your domain users to log in the linux box, you must edit your PAM settings.

Here are some links after googling for your question:



This page describes exactly what you want (I think):

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.


Expert Comment

ID: 12478361

I've just built a server to serve our pc's.  it can be done.  
I've spent the last couple of days doing just this.  I had to use the pre-releases due to circumstances in my environment here at work.

I would wait a month or 2 before tackling this project.  and here's why..
there's been a breakage between windows server 2003AD and samba.  Jerry, and the rest of the programmers on the samba team are doing a great job working on it.  

there's a disconnect between the kerberos authentication backend and samba itself if the kerberos realm is different than the dns domain. there's also an issue with the encription types etc.. etc.. we can thank Microsofts implementation of kerberos... I won't go into the gory details

I would wait until there is a production release of  samba 3.0.8  don't use 3.0.7 with a win2k3 AD domain.

here's what I used and it seemd to work.  mind you the version of samba is not a production release yet...

if you want to play here's the url for these downloads
samba-swat-3.0.8pre2-1.i386.rpm <---this is part of the version, but don't use swat.  it changes double quotes to single quotes around things that need to be quoted...

also, you'll need to make sure you are using these can be had using the fedora updater "yum"

also RTFM    the docs are pretty good if you follow them the links above look good.
we can help you out here if you need more help.



Author Comment

ID: 12478594
mmartha, Where so I find the files in order to edit them? As  you are probablly gathering I am a Windows guy, this is my first foray into the confusing world of Linux!
One other question, Can Linux be a domain controller? By that I mean if I wanted to set up an entire network using Linux could I have a central account like in AD for Windows?
LVL 38

Expert Comment

ID: 12478620
> Where so I find the files in order to edit them
/etc/krb5.conf, /etc/nsswitch.conf, /etc/samba/smb.conf


Expert Comment

ID: 12479005
alternatively, you can do:

# find / -name krb5.conf
# find / -name nsswitch.conf
# find / -name smb.conf


MMarts ;D

Accepted Solution

mmartha earned 375 total points
ID: 12479058
Yes, Linux can be a PDC (Primary Domain Controller) trough samba. I haven't done this, but you can read about how to do it here:

http://www-106.ibm.com/developerworks/eserver/tutorials/samba.html (You need to register, but is free)

Google it. :)


Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In my business, I use the LTS (Long Term Support) versions of Linux. My workstations do real work, and so I rarely have the patience to deal with silly problems caused by an upgraded kernel that had experimental software on it to begin with from a r…
I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension . This reminded me of questions that come up here at EE along the lines of, "How can I tell the type of file from its cont…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
Suggested Courses
Course of the Month12 days, 23 hours left to enroll

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question