integrating debian lenny into Active Directory W2k3 Server

(credit: http://www.ccs.neu.edu/home/battista/documentation/winbind/ )

- sudo aptitude install samba-common heimdal-clients winbind ntpdate ntp-simple samba

- sudo /etc/init.d/ntp stop

- /etc/ntp.conf:
server pdc.domain.dom

- sudo ntpdate pdc.domain.dom

- /etc/init.d/ntp restart

- /etc/krb5.conf:
[libdefaults]
default_realm = DOMAIN.DOM
clockskew = 300
[realms]
DOMAIN.DOM = {
kdc = pdc.domain.dom
admin_server = pdc.domain.dom
}

- /etc/samba/smb.conf:
[global]
realm = DOMAIN.DOM
workgroup = domain
security = ADS
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
template homedir = /home/%D/%U
winbind use default domain = yes

[homes]
valid users = %U

- testparm (check smb.conf syntax)

- sudo mkdir /home/DOMAIN

- /etc/nsswitch.conf:
passwd:        files winbind
group:          files winbind

- sudo ldconfig

- sudo net ads join -U “DOMAINADMIN”

- sudo /etc/init.d/samba restart

- sudo /etc/init.d/winbind restart

- sudo wbinfo -u |xargs getent passwd

- /etc/pam.d/common-account:
account    sufficient    pam_winbind.so
account    required    pam_unix.so

- /etc/pam.d/common-auth:
auth    sufficient    pam_winbind.so
auth    required    pam_unix.so use_first_pass

- /etc/pam.d/common-session:
session    required    pam_mkhomedir.so skel=/etc/skel/ umask=0022
session    sufficient    pam_winbind.so
session required    pam_unix.so