Installation de samba en PDC

Ce document décrit l'installation de samba en contrôleur principal de domaine (PDC) pour les réseaux Microsoft.

Installation :

 pdc:~# apt-get install samba

Initialisation du compte root :

 pdc:~# smbpasswd -a root

Création des groupes admins et machines :

 pdc:~# addgroup --system admins
 pdc:~# addgroup --system machines

Création des répertoires netlogon et profiles :

 pdc:~# mkdir /var/lib/samba/netlogon/
 pdc:~# chown root.admins /var/lib/samba/netlogon/
 pdc:~# mkdir /var/lib/samba/profiles
 pdc:~# chown root.admins /var/lib/samba/profiles/
 pdc:~# chmod 1757 /var/lib/samba/profiles/

Configuration minimale :

 #======================= Global Settings =======================

 [global]

 ## Browsing/Identification ###

 workgroup = DEADBEEF
 netbios name = pdc
 server string = %h server (Samba %v)
 wins support = yes
 dns proxy = yes

 #### Debugging/Accounting ####

 log file = /var/log/samba/log.%m
 syslog = 0
 log level = 2
 panic action = /usr/share/samba/panic-action %d

 ####### Authentication #######

 security = user
 passdb backend = tdbsam guest
 encrypt passwords = true

 domain logons = yes
 os level = 64
 preferred master = yes
 domain master = yes
 local master = yes

 unix password sync = yes
 passwd program = /usr/bin/passwd %u
 passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .

 add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M %u
 admin users = root

 logon home = \\%L\%U\.profile
 logon drive = H:
 logon path = \\%L\profiles\%U

 #======================= Share Definitions =======================

 [homes]
    comment = Home Directories
    browseable = yes
    writable = yes
    create mask = 0700
    directory mask = 0700

 [netlogon]
    comment = Network Logon Service
    path = /var/lib/samba/netlogon
    browseable = no
    guest ok = yes
    writable = no
    share modes = no

 [profiles]
    comment = Network 
    path = /var/lib/samba/profiles
    writable = yes
    browseable = no
    guest ok = no
    directory mask = 0700
    create mask = 0600

 [print$]
    comment = Printer Drivers
    path = /var/lib/samba/printers
    browseable = yes
    read only = yes
    guest ok = no
    write list = root, @ntadmin

Télécharger le fichier smb.conf

Créé par Admin
Dernière modification vendredi 07 avril 2006 23:10