Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: AD Intergration with Cent OS 6
Operating Systems Linux Red Hat AD Intergration with Cent OS 6 Post 302590056 by bobby320 on Friday 13th of January 2012 05:21:39 PM
Old 01-13-2012
AD Intergration with Cent OS 6
Hello,

I am integration AD authentication to Cent OS 6 servers. I am running to this error when I tried to join with AD server.

error message :

Code:
# net ads join -U 504783
Host is not configured as a member server.
Invalid configuration.  Exiting....
Failed to join domain: This operation is only allowed for the PDC of the doma        in.
#

configuration file of samba smb.conf under [global] is updated with this info.

Code:
workgroup = ctab
realm = CTAB.ALPHA.COM
security = ads
idmap uid = 7000-500000
idmap gid = 7000-500000
template shell = /bin/bash
template homedir = /home/%U
winbind use default domain = true
winbind offline logon = false
winbind nss info = rfc2307
idmap config TRD:backend = ad
idmap config TRD:defauly = yes
idmap config TRD:range = 70000-500000
idmap config TRD:schema_mode = rfc2307
server string = Samba Server Version %y

I have updated krb5.conf as this

Code:
#more /etc/krb5.conf
[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = CTAB.ALPHA.COM
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true

[realms]
 CTLAB.ALPHA.COM = {
  kdc = ctab.alpha.com
  admin_server = ctab.alpha.com
 }

[domain_realm]
 .ctab.alpha.com = CTLAB.ALPHA.COM
 ctab.alpha.com = CTLAB.ALPHA.COM
#

I wasnt able to fix it can someone please suggest it.

Thanks,
Kartheek.
 

7 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Chek if a file exists in Ubuntu and Cent OS using shell script

I have tried few examples in the internet but all of them are different and none worked. I need to check if a file exists in a directory if it does not then exit . here is what I have for now $filename ="/usr/local/net/var/lib/directoryservice/sync.disable" if ; then echo "The file exists"... (2 Replies)
Discussion started by: m_kk
2 Replies

2. Linux

how to make a Cent OS package.

I am using Cent OS 5.1. It has a command "yum" to install or update new packeges from a mirror or repository. i am doing installation and configuration of Sun directory server and opensso. i have made a shell script to install and configure both. but now the need is to create a Cent OS packege,... (1 Reply)
Discussion started by: toanilsharma1
1 Replies

3. Red Hat

Installation of Web Logic9.2 on Cent OS5

Hi, Trying to install web logic 9.2 on Cent OS in the Graphical mode. After accepting the license agreement the "Complete" installation is selected.The path for installing the components is mentioned and when clicked on "Next" it hangs and is not proceeding further. Any suggestion or... (0 Replies)
Discussion started by: rajp_8007
0 Replies

4. Linux

UVFS in Cent OS

Hi, Trying to install Interwoven Teamsite in CentOs 5.4. Found issue in the first step while installing the uvfs . # gmake /usr/bin/gcc -g -O3 -Wall -I. -c -o uvfs_signal.o uvfs_signal.cc gcc: error trying to exec 'cc1plus': execvp: No such file or directory gmake: *** Error 1 # ... (2 Replies)
Discussion started by: rajarshiroy77
2 Replies

5. Red Hat

How to Find all the SSL certs on a give host Cent OS

Hi I am trying to find all the ssl certs installed/located on cent os Host , Please help . (1 Reply)
Discussion started by: smartguyz2012
1 Replies

6. UNIX for Advanced & Expert Users

Disable rm -rf * or rm -rf / in Cent OS

Can some one suggest me the way to disable " rm -rf * " or " rm -rf / " command execution permanently from the server. Any suggestion will be very much helpful . (18 Replies)
Discussion started by: shiek.kaleem
18 Replies

7. Linux

Add persistent route in cent os 6.5

Hi , I have cent os 6.5 and am trying to make few routes permanent for bond: i have added two routes using below two commands : /sbin/route add -net 10.0.0.0 netmask 255.0.0.0 gw 10.59.160.128 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 49.44.52.90 post which route command output is... (5 Replies)
Discussion started by: omkar.jadhav
5 Replies

LEARN ABOUT CENTOS

idmap_ldap

IDMAP_LDAP(8)						    System Administration tools 					     IDMAP_LDAP(8)

NAME

       idmap_ldap - Samba's idmap_ldap Backend for Winbind

DESCRIPTION

       The idmap_ldap plugin provides a means for Winbind to store and retrieve SID/uid/gid mapping tables in an LDAP directory service.

       In contrast to read only backends like idmap_rid, it is an allocating backend: This means that it needs to allocate new user and group IDs
       in order to create new mappings.

IDMAP OPTIONS

       ldap_base_dn = DN
	   Defines the directory base suffix to use for SID/uid/gid mapping entries. If not defined, idmap_ldap will default to using the "ldap
	   idmap suffix" option from smb.conf.

       ldap_user_dn = DN
	   Defines the user DN to be used for authentication. The secret for authenticating this user should be stored with net idmap secret (see
	   net(8)). If absent, the ldap credentials from the ldap passdb configuration are used, and if these are also absent, an anonymous bind
	   will be performed as last fallback.

       ldap_url = ldap://server/
	   Specifies the LDAP server to use for SID/uid/gid map entries. If not defined, idmap_ldap will assume that ldap://localhost/ should be
	   used.

       range = low - high
	   Defines the available matching uid and gid range for which the backend is authoritative.

EXAMPLES

       The following example shows how an ldap directory is used as the default idmap backend. It also configures the idmap range and base
       directory suffix. The secret for the ldap_user_dn has to be set with "net idmap secret '*' password".

		[global]
		idmap config * : backend      = ldap
		idmap config * : range	      = 1000000-1999999
		idmap config * : ldap_url     = ldap://localhost/
		idmap config * : ldap_base_dn = ou=idmap,dc=example,dc=com
		idmap config * : ldap_user_dn = cn=idmap_admin,dc=example,dc=com

       This example shows how ldap can be used as a readonly backend while tdb is the default backend used to store the mappings. It adds an
       explicit configuration for some domain DOM1, that uses the ldap idmap backend. Note that a range disjoint from the default range is used.

		[global]
		# "backend = tdb" is redundant here since it is the default
		idmap config * : backend = tdb
		idmap config * : range = 1000000-1999999

		idmap config DOM1 : backend = ldap
		idmap config DOM1 : range = 2000000-2999999
		idmap config DOM1 : read only = yes
		idmap config DOM1 : ldap_url = ldap://server/
		idmap config DOM1 : ldap_base_dn = ou=idmap,dc=dom1,dc=example,dc=com
		idmap config DOM1 : ldap_user_dn = cn=idmap_admin,dc=dom1,dc=example,dc=com

NOTE

       In order to use authentication against ldap servers you may need to provide a DN and a password. To avoid exposing the password in plain
       text in the configuration file we store it into a security store. The "net idmap " command is used to store a secret for the DN specified
       in a specific idmap domain.

AUTHOR

       The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open
       Source project similar to the way the Linux kernel is developed.

Samba 4.0							    06/17/2014							     IDMAP_LDAP(8)
All times are GMT -4. The time now is 04:35 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy