Active Directory Intergration (Like in SUSE)!

[the_jaymz]

I have attached my scripts. for me, I put these files on an internal webhost and then wget it and run it. the kerb.txt file should be renamed to kerb.sh and the 2 other files should have the .txt extension removed. I make plenty of backups in my scripts (I like backups) but test for yourself before putting this on anything live. Obviously you will need to make adjustments because I have omitted my actual DC servers and domain name, but other than that its exactly what I use on a new machine to auth it for AD auth. and fyi, if you install something that uses PAM after running this script, the PAM file will probably need to be updated (like ssh or webmin) to use AD auth. and of course give yourself sudo if you need that. in my samba config I am also creating a c$ share, because I like to be able to browse to c$

the only problem I have had with this and haven't had time to script this fix, is that samba and winbind need to be started and in a particular order for it to work properly. So if this doesn't work immediatly then you need to

/etc/init.d/winbind stop
/etc/init.d/samba restart
/etc/init.d/winbind start

and all should be good.

The way I fix that is to remove the init scripts for samba and winbind

update-rcd -f remove winbind
update-rcd -f remove samba

and I then create my own init script that starts samba first and then starts winbind. it doesn't seem to work properly if winbind is started first.

after lots of trial and error and trying other methods, this is the best I have come across. and I can't take credit for the steps because I pieced most of it together from 2 or 3 sources (can't remember now), but I automated it and scripted it myself.

I have so far never shown this to anyone outside of my co so I would really appreciate comments.

Thanks.

I guess I must have borked my smb.conf somewhere when I tried this on my own, but using you script and conf files worked perfectly for Debian Lenny. Thanks.

I didn't see any associated license, and I was thinking about making some changes and uploading. Would you have any objections?

[jledhead]

I pulled my info to get these files from all over, so the only claim I can make is that they work for me

if you want/need to edit them, go for it.

Glad they worked for you initially.