https://www.chepkov.com/w/index.php?action=history&feed=atom&title=Winbind
Winbind - Revision history
2026-04-28T17:13:37Z
Revision history for this page on the wiki
MediaWiki 1.43.6
https://www.chepkov.com/w/index.php?title=Winbind&diff=257&oldid=prev
Vvc: enable local accounts
2009-07-03T12:48:58Z
<p>enable local accounts</p>
<p><b>New page</b></p><div>__NOTOC__<br />
=== Prerequisites ===<br />
yum install ntp samba-winbind krb5-workstation authconfig<br />
<br />
=== NTP ===<br />
<br />
Make sure time is synchronized with the ADS controller.<br />
<br />
=== authconfig ===<br />
<br />
Run authconfig<br />
<br />
<pre><br />
# authconfig --updateall --enablewinbind --enablelocauthorize --enablewinbindauth --smbsecurity=ads --smbrealm=DOMAIN.LAN \<br />
--smbidmapuid=10000-20000 --smbidmapgid=10000-20000 --winbindseparator=/ --winbindtemplatehomedir=/home/%U \<br />
--winbindtemplateshell=/bin/bash --enablewinbindusedefaultdomain --winbindjoin=Administrator<br />
</pre><br />
<br />
=== Verify domain membership ===<br />
<br />
<pre><br />
# wbinfo -u<br />
administrator<br />
guest<br />
krbtgt<br />
mobile user tmpl<br />
user tmpl<br />
power user tmpl<br />
administrator tmpl<br />
...<br />
</pre><br />
<br />
=== Tune /etc/samba/smb.conf ===<br />
<br />
Add these parameters: <br />
<pre><br />
winbind cache time = 10<br />
winbind enum users = Yes<br />
winbind enum groups = Yes<br />
winbind nested groups = Yes<br />
obey pam restrictions = yes<br />
</pre><br />
<br />
Restart winbind<br />
service winbind restart<br />
<br />
=== Verify integration ===<br />
<pre><br />
# getent passwd<br />
root:x:0:0:root:/root:/bin/bash<br />
bin:x:1:1:bin:/bin:/sbin/nologin<br />
...<br />
administrator:*:10001:10000:Administrator:/home/administrator:/bin/bash<br />
guest:*:10002:10001:Guest:/home/guest:/bin/bash<br />
...<br />
</pre><br />
[[Category:Linux]]</div>
Vvc