用linux怎么登陆windows域？

cl516518

用linux怎么登陆windows域？

cl516518

没人知道么？顶一下

lyl2001

比较麻烦。要用到SAMBA的WINBIND功能。
具体我也不清楚。

kingduanlian

Samba3加入MSDOMAIN

实现功能：Samba 登陆 MS DOMAIN 成为域成员

测试平台：RedHat AS 3 + W2K Server

samba-client-3.0.0-14.3E

samba-common-3.0.0-14.3E

samba-3.0.0-14.3E

krb5-libs-1.2.7-19

krb5-workstation-1.2.7-19

环境如下:

Domain: win2k.com

network: 192.168.0.0/24

dns: 192.168.0.15

RedHat AS 3

Hostname: home.win2k.com

IP: 192.168.0.1

Action: File server

Win2k Server + SP4

netbios name：win

Hostname: win.win2k.com

IP:192.168.0.33

AD Administrator: administrator

password: ******

Samba的配置

# Global parameters

[global]

workgroup = win2k.com

server string = samba

security = domain

password server = win.win2k.com

encrypt passwords = yes

log file = /var/log/samba/%m.log

max log size = 50

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

dns proxy = No

hosts allow = 192.168.0.

[homes]

comment = Home Directories

read only = No

browseable = No

[printers]

comment = All Printers

path = /var/spool/samba

printable = Yes

browseable = No

添加系统用户及Samba用户 administrator , 该用户应有管理MS DOMAIN 的权限

# useradd -d /dev/null -s /bin/false administrator

# passwd administrator

添加Samba用户

# smbpasswd -a administrator

配置 /etc/krb5.conf, 属于包krb5-libs-1.2.7-19

# cp -a /etc/krb5.conf /etc/krb5.conf.orig

# vi /etc/krb5.conf

# vi /etc/krb5.conf.orig

[logging]

default = FILE:/var/log/krb5libs.log

kdc = FILE:/var/log/krb5kdc.log

admin_server = FILE:/var/log/kadmind.log

[libdefaults]

ticket_lifetime = 24000

default_realm = WIN2K.COM

dns_lookup_realm = false

dns_lookup_kdc = false

[realms]

WIN2K.COM = {

kdc = win.win2k.com:88

admin_server = win.win2k.com:749

default_domain = win2k.com

}

[domain_realm]

.example.com = win2k.com

example.com = win2k.com

[kdc]

profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]

pam = {

debug = false

ticket_lifetime = 36000

renew_lifetime = 36000

forwardable = true

krb4_convert = false

}

初始化用户 admin和密码

# /usr/kerberos/bin/kinit llzqq@win2k.com


加入DOMAIN

# net join –S win2k.com –U administrator%password

在 MS DOMAIN 中查看主机 home 已经加入到win2k.com中。

lyl2001

我的系统是[root@ntsapbak ~]# cat /proc/version
Linux version 2.6.9-1.681_FC3 (bhcompile@tweety.build.redhat.com) (gcc version 3.4.2 20041017 (Red Hat 3.4.2-6.fc3)) #1 Thu Nov 18 15:10:10 EST 2004
1.检查是否安装winbindd
[root@ntsapbak ~]# whereis winbindd
winbindd: /usr/sbin/winbindd /usr/share/man/man8/winbindd.8.gz
2.检查winbind的NSS函数库是否正确安装。
[root@ntsapbak ~]# /sbin/ldconfig -v | grep winbind
        libnss_winbind.so -> libnss_winbind.so.2
3.设置/etc/nsswitch.conf文件
...
passwd:  files winbind
shadow:  files
group:     files winbind
...
4.设定winbindd服务
vi /etc/samba/smb.conf
...
[global]
idmap uid = 10000-20000
idmap gid = 10000-20000
...
workgroup =Domain
...
按楼上的方法加入网域
5.启动winbindd服务
/etc/init.d/winbind start
chkconfig winbind on
6.取得网域账号
wbinfo -u
执行下面命令，查看winbind已经将NT网域的账号与本机账号结合
getent passwd
7.解决双方账号间的uid/gid冲突的问题
vi /etc/login.defs
UID_MAX                 60000
改为
UID_MAX                 9999

GID_MAX                 60000
改为
GID_MAX                 9999

aleng

并不是登入那么简单，这实际涉及到两套用户名密码，同步，文件权限问题
我认为应该用微软的sfu方案，就是用 ms nis服务器。