Differences between revisions 6 and 7
Revision 6 as of 2007-05-03 01:58:39
Size: 5072
Editor: ?BobBobly
Comment:
Revision 7 as of 2007-05-03 02:02:39
Size: 5219
Editor: ?BobBobly
Comment:
Deletions are marked like this. Additions are marked like this.
Line 7: Line 7:
 Enter password for the ldap admin when prompted Enter password for the ldap admin when prompted
Line 34: Line 34:
Enter your domain name when prompted ex. buster.lan
Answer NO when asked whether you want to modify smb.conf or not
Enter your domain name when prompted ex. buster.lan[[BR]]
Answer NO when asked whether you want to modify smb.conf or not[[BR]]
Line 50: Line 50:
open a webbrowser and go to: https://pdc/phhldapadmin/ (replace pdc with your server name or IP)
login with the following user:
open a webbrowser and go to: https://pdc/phhldapadmin/ (replace pdc with your server name or IP)[[BR]]
login with the following user:[[BR]]
Line 55: Line 55:
use the password entered when you installed LDAP
expand the root node and then click on “Create new entry here”
select OU and click “proceed”
enter users for the OU name and click “Create object”
repeat the previous three steps and create two other OUs called “groups” and “machines”
use the password entered when you installed LDAP[[BR]]
expand the root node and then click on “Create new entry here”[[BR]]
select OU and click “proceed”[[BR]]
enter users for the OU name and click “Create object”[[BR]]
repeat the previous three steps and create two other OUs called “groups” and “machines”[[BR]]
Line 95: Line 95:
Log back into phpldapadmin and verify that the DomainName record exists below the root
create the following Samba3 Mappings under the groups OU:
Log back into phpldapadmin and verify that the DomainName record exists below the root[[BR]]
create the following Samba3 Mappings under the groups OU:[[BR]]
Line 106: Line 106:
Enter the server name as ldap://127.0.0.1/ when prompted
put in the search base as dc=buster,dc=lan (replace with your domain structure)
put in the samba version as 3
enter the admin profile as cn=admin,dc=buster,dc=lan (replcae with your domain structure)
enter the admin password

accept with OK
Enter the server name as ldap://127.0.0.1/ when prompted[[BR]]
put in the search base as dc=buster,dc=lan (replace with your domain structure)[[BR]]
put in the samba version as 3[[BR]]
enter the admin profile as cn=admin,dc=buster,dc=lan (replcae with your domain structure)[[BR]]
enter the admin password[[BR]]

accept with OK[[BR]]
Line 116: Line 116:
add “ldap” after every compat add “ldap” after every compat[[BR]]
Line 126: Line 126:
Answer yes
Answer no
Enter the admin profile - cn=admin,dc=buster,dc=lan (replace with your domain structure)
Enter your admin password
Answer yes[[BR]]
Answer no[[BR]]
Enter the admin profile - cn=admin,dc=buster,dc=lan (replace with your domain structure)[[BR]]
Enter your admin password[[BR]]
Line 149: Line 149:
execute - /etc/init.d/ssh restart (if ssh is installed)
execute - /etc/init.d/samba restart
/etc/init.d/ssh restart (if ssh is installed)
/etc/init.d/samba restart
Line 188: Line 188:
go to your windows machine and right-click on mycomputer and select properties
on the name tab select change

select the domain radio button and enter buster.lan and click ok
enter root for the username
enter your root password
you should see a welcome to the buster.lan domain message and then reboot and you can log in using user from your LDAP database.
go to your windows machine and right-click on mycomputer and select properties[[BR]]
on the name tab select change[[BR]]

select the domain radio button and enter buster.lan and click ok[[BR]]
enter root for the username[[BR]]
enter your root password[[BR]]
you should see a welcome to the buster.lan domain message and then reboot and you can log in using user from your LDAP database.[[BR]]

How to create samba3 PDC with ldap backend

Install LDAP

aptitude install slapd 

Enter password for the ldap admin when prompted

Install PHPLDAPADMIN web interface

aptitude install apache-ssl phpldapadmin

Enter your country code when prompted ex. US?BR Enter the name of your state when prompted ex. Utah?BR Enter the name of your city when prompted ex. Salt Lake City?BR Enter your organization when prompted ex. buster.lan?BR Enter your OU name when prompted ex. ITT?BR Enter your host name when prompted ex. pdc.buster.lan?BR Enter the contact email when prompted ex. root@buster.lan?BR

Install MKNTPWD

wget http://www.nomis52.net/data/mkntpwd.tar.gz
tar zxvf mkntpwd.tar.gz
cd mkntpwd
make
cp mkntpwd /usr/local/bin/

Install Samba

aptitude install make gcc libc-dev samba samba-doc

Enter your domain name when prompted ex. buster.lan?BR Answer NO when asked whether you want to modify smb.conf or not?BR

cd /usr/share/doc/samba-doc/examples/LDAP
gunzip samba.schema.gz
cp samba.schema /etc/ldap/schema/
vim /etc/ldap/slapd.conf

add this line after the other include lines:

include         /etc/ldap/schema/samba.schema

Now restart LDAP

/etc/init.d/slapd restart

open a webbrowser and go to: https://pdc/phhldapadmin/ (replace pdc with your server name or IP)?BR login with the following user:?BR

cn=admin,dc=buster,dc=lan

use the password entered when you installed LDAP?BR expand the root node and then click on “Create new entry here”?BR select OU and click “proceed”?BR enter users for the OU name and click “Create object”?BR repeat the previous three steps and create two other OUs called “groups” and “machines”?BR

vim /et c/samba/smb.conf

find:

passdb backend=tdsam

and replace it with:

passdb backend = ldapsam:ldap://127.0.0.1
ldap suffix = dc=nomis52,dc=net
ldap machine suffix = ou=machines
ldap user suffix = ou=users
ldap group suffix = ou=groups
ldap admin dn = cn=admin,dc=nomis52,dc=net
ldap delete dn = no

# be a PDC
domain logons = yes

# allow user privileges
enable privileges = yes

make sure testparm executes successfully:

testparm

Set the samba password and restart samba

smbpasswd -w password
/etc/init.d/samba restart

Log back into phpldapadmin and verify that the ?DomainName record exists below the root?BR create the following Samba3 Mappings under the groups OU:[[BR]]

Unix/Windows Name

GID

SID ending number

admins

20000

512

users

20001

513

guests

20002

514

aptitude install libnss-ldap

Enter the server name as ldap://127.0.0.1/ when prompted?BR put in the search base as dc=buster,dc=lan (replace with your domain structure)?BR put in the samba version as 3?BR enter the admin profile as cn=admin,dc=buster,dc=lan (replcae with your domain structure)?BR enter the admin password?BR accept with OK?BR

vim /etc/nsswitch.conf

add “ldap” after every compat?BR

verify that users, guests, and admins exist by executing:

getent group

aptitude install libpam-ldap

Answer yes?BR Answer no?BR Enter the admin profile - cn=admin,dc=buster,dc=lan (replace with your domain structure)?BR Enter your admin password?BR

vim /etc/pam.d/common-account

add the following to the end of the file:

account         sufficient      pam_ldap.so
account         required        pam_unix.so     try_first_pass

vim /etc/pam.d/common-auth

add the following line to the beginning of the file:

password sufficient pam_ldap.so

restart ssh and samaba

/etc/init.d/ssh restart (if ssh is installed)
/etc/init.d/samba restart

install nscd

aptitude install nscd
vim /etc/samba/smb.conf

add the following line to the file:

ldap password sync=yes

log back into phpldapadmin and create the following Samba3 Users under the users OU: ||First Name||Last Name||username||UID||SID ending||Home Directory ||Domain||Admin||adminstrator||10000||21000||admins||/home/buster/adminstrator ||(your)||(name)||(username)||10001||21001||admins||/home/buster/(username)

verify the new users are in the database:

getent passwd

create home directory

mkdir /home/buster
mkdir /home/buster/(username)
cp /etc/skel/.* /home/buster/(username)
chown -R (username):users /home/buster/(username)

log back into phpldapadmin and create the a Samba3 machines under the machines OU:

Machine Name

UID

(machinename)$

30000

smbpwd -a root

enter your root password

go to your windows machine and right-click on mycomputer and select properties?BR on the name tab select change?BR select the domain radio button and enter buster.lan and click ok?BR enter root for the username?BR enter your root password?BR you should see a welcome to the buster.lan domain message and then reboot and you can log in using user from your LDAP database.?BR