Member Avatar for coleon1955

I have a Win 2k AD domain controller, how do I access the network from a Redhat 8 box. I am new to Linux so take it slowly. I read a couple of articles about Samba. Is Samba something separate I have to install on top of Redhat, or is it imbedded some where in the Redhat OS. Can somebody walk me through the process step-by-step.

Thanks!

  • 4 Contributors
  • 3 Replies
  • 187 Views
  • 4 Years Discussion Span
  • Latest Post Latest Post by ibi001

Dani AI

Generated

A compact, practical roadmap for that builds on ’s and ’s comments: Samba is provided as a separate package (not part of the kernel), and AD integration requires a Samba build with Kerberos and winbind support. The steps below focus on the minimum, working sequence for joining a Red Hat 8 box to a Windows 2000 AD domain and accessing shares.

  1. Ensure DNS and time are correct: the Linux host must resolve the AD domain controllers by name and have its clock synced to the domain (Kerberos is strict about skew).
  2. Install Samba + winbind + CIFS tools via your distro package tool (or install a newer Samba build if the shipped package is old).
  3. Configure Kerberos (/etc/krb5.conf) with the AD realm and KDC. Configure /etc/samba/smb.conf for security = ADS, set workgroup and realm, and enable winbind/id mapping.
  4. Join the domain with an AD account that has machine-join rights, start smbd/nmbd/winbind, and enable NSS/PAM integration so domain users appear locally.
  5. Verify with winbind/samba tools and mount shares with CIFS.

Example snippets and commands (adjust names to your environment):

# minimal smb.conf fragment
[global]
 workgroup = EXAMPLE
 realm = EXAMPLE.COM
 security = ADS
 idmap uid = 10000-20000
 idmap gid = 10000-20000
 winbind use default domain = yes
 winbind enum users = yes
 winbind enum groups = yes
# minimal krb5.conf fragment
[libdefaults]
 default_realm = EXAMPLE.COM

[realms]
 EXAMPLE.COM = {
  kdc = dc.example.com
  admin_server = dc.example.com
 }
net ads join -U Administrator
service smb start && service nmb start && service winbind start
mount -t cifs //fileserver/share /mnt -o username=EXAMPLE\\user

Quick tests and troubleshooting: use testparm to validate smb.conf, wbinfo -u / wbinfo -g and getent passwd to confirm domain user resolution, and examine /var/log/samba and winbind logs for errors. Confirm firewall rules allow SMB (137–139, 445), Kerberos (88) and LDAP/LDAP-S as needed. Note ’s Vista observation: newer Windows releases introduced protocol/security changes, so an up-to-date Samba (or appropriate Windows/SMB settings) is often required for full compatibility.

Recommended Answers

All 3 Replies

Member Avatar for kc0arf

Hello,

An excellent question! Samba will allow you to mount the Microsoft network onto the Redhat Linux box.

I do not have time today to do this and write it all out for you. I will add it to the list; perhaps Thursday.

Christian

Member Avatar for DMR

SaMBa is the open-source implementation of the SMB/CIFS file and print sharing protocol. It is a separate program, not part of the OS itself; you'll have to install it yourself, but depending on the way you installed RH the Samba packages might already be installed as well. You can check to see if the Samba RPM has been installed with the following command:

rpm -q samba

* Note that for in order get the tightest integration with a Win 2K AD domain, you'll want to use the latest (stable) release, which is v3.0.4. The version available on your RH8 disks will be older.

A thorough step-by-step walkthrough of Samba might be a bit lengthy to post here- there are many different options which you configue in Samba. You might want to read through a few online resources, see how far you can get using those, and then post here with specific questions:

http://us1.samba.org/samba/docs/
http://us1.samba.org/samba/docs/using_samba/toc.html

Member Avatar for ibi001

Samba and Vista.. I don't know why somebody in the linux community has not
written a routine that will link vista/linux
more easily.. I know samba is the link...
But I am thinking more of an application
that brings up windows that u can communicate with both OS's.... If you
don't have a quote 'windows' environment
then you are stuck using the old syntax
to get anything done... This is the old
standard that the old timers on unix used...
Only a few techie guys that knew unix
knew all the commands.. and the syntax...
It is time to get rid of the syntax and just
use the select and run environment....
Maybe this is just a wish for the 22nd
century.... But please...come up with
a better procedure... Vista does not want
to communicate with Linux... That is the
bottom line... Bill Gates could have done
this 20 years ago... so with that said...
Get a windows/samba application going
please..... I won't be around to see it,
but the younger people will... Let the
government write it for God's sake...
Have a good day....

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.