Re: [tlug] Windows 2000 and CIFS

[=?UTF-8?Q?Alessandro_Mantelli=E3=80=90HOBIBOX=E3=80=91?= <alex@example.com>]

Hello, thanks for the reply.

Actually I haven't been able to solve the problem yet.
I've configured samba and kerberos and winbind and
1) I can kinit sucessfully
2) Net ads join work only if I use the windows 2000 Administrator user name
and password
3) If i do su DOMAINNAME#username it works

But I can see no windows 2000 share folders. I mean, I don't know how to
continue.
Ps. I tried to change the etc/pam.d/login setting to join the domain but it
doesn't work,
but more then using winbind I would like to have a replacement of
smbmount^^;
thus, I was looking for some solution like mount -t cifs etc.etc... (the
idea is to join the
linux server through a vpn with pptp)

Thanks in Advance
Alex


My Smb.conf file

global]
realm = HB.LOCAL
netbios name=hobibackup
workgroup = myworkgroup
server string = %h server (Samba %v)
dns proxy = no
log file = /var/log/samba/log.%m
max log size = 1000
syslog only = no
syslog = 0
security = ads
encrypt passwords = true
obey pam restrictions = yes
invalid users = root
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
hosts deny=ALL
hosts allow=192.168.0.

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

wins server=192.168.0.2
local master=no
domain master=no

winbind separator=#
winbind uid = 10000-20000
winbind gid= 10000-20000
winbind enum users = yes
winbind enum groups = yes
template homedir=/home/%D/%U
template shell=/bin/bash


[homes]
comment = Home Directories
browseable = no
writable = yes
valid users= %D#%S
create mode=0064
directory mode =0775


[groupfl]
path = /home/group-files
read only = no
writable=yes
valid user = @example.com#%S



My krb5.conf file


[libdefaults]
 default_realm = HB.LOCAL
 krb4_config = /etc/krb.conf
 krb4_realms = /etc/krb.realms
 kdc_timesync = 1
 ccache_type = 4
 forwardable = true
 proxiable = true

 v4_instance_resolve = false
 v4_name_convert = {
  host = {
   rcmd = host
   ftp = ftp
  }
  plain = {
   something = something-else
  }
 }

[realms]
HB.LOCAL = {
  kdc = 192.168.0.2
  admin_server = mydomain
}

[domain_realm]
.hb.local=HB.LOCAL
hb.local=HB.LOCAL

[login]
 krb4_convert = true
 krb4_get_tickets = true

[pam]
 debug= false
 ticket_lifetime=36000
 renew_lifetime=36000
 forwardable=true
 krb4_convert=false