Linux加入域

今天周六，抽了点时间来安装了一台linux，版本为centos6.0，一起加入到本地win2003搭建的域里，在这里写个备忘。

附上krb5.conf

[logging]

default = FILE:/var/log/krb5libs.log

kdc = FILE:/var/log/krb5kdc.log

admin_server = FILE:/var/log/kadmind.log

[libdefaults]

default_realm = CHINAGAME.COM

dns_lookup_realm = false

dns_lookup_kdc = true

ticket_lifetime = 24h

forwardable = yes

[realms]

LINUX.ORG = {

  kdc = 192.168.119.3:88

  admin_server = 192.168.119.3:749

  default_domain = CHINAGAME.COM

}

[domain_realm]

.chinagame.com = CHINAGAME.COM

chinagame.com = CHINAGAME.COM

[appdefaults]

pam = {

   debug = false

   ticket_lifetime = 36000

   renew_lifetime = 36000

   forwardable = true

   krb4_convert = false

}

另外smb.conf文件需要的地方：

# ----------------------- Domain Members Options ------------------------

    security = ads

    passdb backend = tdbsam

    realm = chinagame.com

    password server = dc1.chinagame.com

        dmap uid = 10000 - 20000

        idmap gid = 10000 - 20000

        template shell = /sbin/nologin

        template homedir = /home/samba/

        winbind separator = %

        winbind use default domain = yes

        winbind enum users = yes

        winbind enum groups = yes

        encrypt passwords = yes