Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1297
  • Last Modified:

Configure Samba / Kerberos and LDAP on Red Hat

http://www.linuxmail.info/active-directory-single-sign-on/

http://www.linuxmail.info/active-directory-integration-samba-centos-5/

If I need to allow my AD users to access the Red Hat server, and the Red Hat server is enabled to user the shared resource in Window domain, do I need to do enable Samba and Kerberos/LDAP on the Red Hat, or either one ?

What the main difference between these two settings ?

Thanks
0
AXISHK
Asked:
AXISHK
  • 3
  • 2
2 Solutions
 
de2ZotjesCommented:
When you say samba I presume you mean the winbindd portion of samba.

You would need to enable 1 of the two, windbindd or ldap. In principle kerberos is independent of the chosen mechanism, that being said I do not know of any implementations using winbind and kerberos.

The main difference is that for ldap to work you need to extend active directory with 'unix services'. Something a lot of windows administrators rather not do.
0
 
Monis MontherSystem ArchitectCommented:
You need to run the winbind service.

You also need to run Kerberos as a Client and not as a KDC. Your AD is a kerberos KDC.

This is as simple as changing two/three lines in /etc/krb5.conf.

Then you need to Join your Linux Machine to Windows AD.

Configure Authentication to lookup from WinAD.

Finally you run the winbind service to actually start to login with Windows users on the Linux machine.

However the Linux users will not be able to run on the Windows machine. If you want that then you need to run SFU on your Windows AD to support Linux users on it.
0
 
AXISHKAuthor Commented:
http://www.linuxmail.info/active-directory-integration-samba-centos-5/

Follow the instruction above and I could setup  winbind service succesfully. Can u advise how to setup the remaining steps as mentioned in the previous thread.

Great Thanks.
0
Learn Veeam advantages over legacy backup

Every day, more and more legacy backup customers switch to Veeam. Technologies designed for the client-server era cannot restore any IT service running in the hybrid cloud within seconds. Learn top Veeam advantages over legacy backup and get Veeam for the price of your renewal

 
AXISHKAuthor Commented:
http://www.linuxmail.info/active-directory-dovecot-pam-authentication/

Follow this link, I have setup the Kerberos authentication and it works fine.

However, when I log off the Linux server, and try to use one of the AD domain user to login to the Red Hat server, it could authentication the login successfully.

Any idea ?

Thanks
0
 
Monis MontherSystem ArchitectCommented:
OK so from the command line if you type

wbinfo -a

Do you get all the windows users listed?

If so now you need to configure PAM. from the same place you did the kerberos and winbind configuration. (This was mensioned in the guide you posted)

Now we need to make sure they can login as shell users before GUI.

From the options tab in system-config-authentication check the box that says ceate home dirs.

Now to test this while still logged in RedHat as the root user run the following command

su - username

Where username is windows username that you have under ActiveDirectory.

The home dir should be created and you should get no errors on the command line

Confrim the above is all ok to proceed getting you in via the GUI
0
 
AXISHKAuthor Commented:
Tks
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now