Sponsored Content
Special Forums Windows & DOS: Issues & Discussions Integrate RHEL with Active Directory Post 302884068 by gull04 on Friday 17th of January 2014 10:14:08 AM
Old 01-17-2014
Hi Stuart,

It's working against the AD for all of it's stuff, possibly better if I incorporate the sssd,conf file here.

We are running a very similar setup to yours, with an 18 node cluster using GFS at the back end with automount for home directories etc.

Code:
[15:06 sc386dm@ekbvcad301 data] > cat orig.sssd.conf
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = XXXXXXXXXXXXX

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3

[pam]
reconnection_retries = 3
#ldap_schema = rfc2307bis
ldap_schema = rfc2307
ldap_user_search_base = cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_group_search_base = cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_default_bind_dn = cn=admintest,cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_default_authtok_type = password
ldap_default_authtok = XXXXXXXX
ldap_force_upper_case_realm = True

[domain/EKB.ATMEL.COM]
description = LDAP auth to AD2003
min_id = 100
id_provider = ldap
auth_provider = ldap
ldap_uri = ldap://kdc1.xxx.xxxxx.com
ldap_schema = rfc2307bis
ldap_search_base = cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_default_bind_dn = cn=admintest,cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_default_authtok_type = password
ldap_default_authtok = XXXXXXXX
ldap_user_object_class = user
ldap_group_object_class = group
ldap_user_home_directory = unixHomeDirectory
ldap_user_gecos = displayName
enumerate = true
chpass_provider = krb5
auth_provider = krb5
krb5_kdcip = 10.143.253.183
krb5_realm = XXX.XXXXX.COM
krb5_ccachedir = /tmp
krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
krb5_auth_timeout = 15

#cache_credentials = True
#ldap_id_use_start_tls = False
debug_level = 9
krb5_kpasswd = kdc1.xxx.xxxxx.com:749
#ldap_search_base = cn=Users,dc=xxx,dc=xxxxx,dc=com
#krb5_realm = XXX.XXXXX.COM
#chpass_provider = krb5
#krb5_kdcip = kdc1.xxx.xxxxx.com:88
#ldap_tls_cacertdir = /etc/openldap/cacerts
[15:10 sc386dm@ekbvcad301 data] >

Anywhere you see 'x' or 'X' you'll have to substitute your own stuff - I have to leave now - but will check back when I get home (5 Hours).

Regards

Gull04
 

7 More Discussions You Might Find Interesting

1. Windows & DOS: Issues & Discussions

unix and active directory

Hi Does anybody know the steps and requirements of the installation process of Windows Active Directory using Unix/Linux Bind DNS. I will appreciate if somebody gives the answer. (1 Reply)
Discussion started by: Darwin Rodrigue
1 Replies

2. UNIX for Dummies Questions & Answers

Active Directory and UNIX

Hello - I have a very vague question, which will probably result in vague answers because I don't have a lot of detailed information and I don't know a whole lot about active directory. Our Windows/NT admin has been rolling out Active Directory over the past several weeks and as time goes on,... (1 Reply)
Discussion started by: rm -r *
1 Replies

3. UNIX for Dummies Questions & Answers

setup active directory

i would like to ask about unix with active directory..actually my situation is at ny place there already have dns server in unix based,i want to implement an active directory to the network..from what i read about active directory we have to used bind dns...some say that bind could not handle in... (1 Reply)
Discussion started by: nour
1 Replies

4. HP-UX

HP-UX authenticating to Active Directory

Hey, I've asked questions about this project here before and gotten lots of help so I figured I'd give it another try. I've recently set up my HP-UX environment to authenticate to a Windows Active Directory server (Windows Server 2003 R2). I setup an account on Active Directory which works... (2 Replies)
Discussion started by: Rike255
2 Replies

5. Red Hat

ldap and active directory

Hi Friends, I need your help to get some solution of one of my problem. Ours is a mixed domain. Most of the servers are windows and very little linux servers. We are using the MS AD for authentication. My problem is, I want to authenticate linux servers against AD. I donot want to use any... (1 Reply)
Discussion started by: arumon
1 Replies

6. UNIX for Advanced & Expert Users

Active Directory with 6.1

Is there anyone who is utilizing Active Directory (2008R2) for AIX user account management? If yes or if AD is possible with AIX systems, can you please share what to be done to get there? Please advise. (1 Reply)
Discussion started by: Daniel Gate
1 Replies

7. UNIX for Beginners Questions & Answers

Active Directory OR LDAP

Hi, How can we check users added through LDAP or AD. Users added through a group of AD or LDAP group. (2 Replies)
Discussion started by: Nishit
2 Replies
SAMBA(7)							    Miscellanea 							  SAMBA(7)

NAME
samba - A Windows AD and SMB/CIFS fileserver for UNIX SYNOPSIS
samba DESCRIPTION
The Samba software suite is a collection of programs that implements the Server Message Block (commonly abbreviated as SMB) protocol for UNIX systems and provides Active Directory services. This protocol is sometimes also referred to as the Common Internet File System (CIFS). For a more thorough description, see http://www.ubiqx.org/cifs/. Samba also implements the NetBIOS protocol in nmbd. samba(8) The samba daemon provides the Active Directory services and file and print services to SMB clients. The configuration file for this daemon is described in smb.conf(5). smbd(8) The smbd daemon provides the file and print services to SMB clients, such as Windows 95/98, Windows NT, Windows for Workgroups or LanManager. The configuration file for this daemon is described in smb.conf(5). nmbd(8) The nmbd daemon provides NetBIOS nameservice and browsing support. The configuration file for this daemon is described in smb.conf(5). winbindd(8) winbindd is a daemon that is used for integrating authentication and the user database into unix. smbclient(1) The smbclient program implements a simple ftp-like client. This is useful for accessing SMB shares on other compatible servers (such as Windows NT), and can also be used to allow a UNIX box to print to a printer attached to any SMB server (such as a PC running Windows NT). samba-tool(8) The samba-tool is the main Samba Administration tool regarding Active Directory services. testparm(1) The testparm utility is a simple syntax checker for Samba's smb.conf(5) configuration file. smbstatus(1) The smbstatus tool provides access to information about the current connections to smbd. nmblookup(1) The nmblookup tools allows NetBIOS name queries to be made from a UNIX host. smbpasswd(8) The smbpasswd command is a tool for changing LanMan and Windows NT password hashes on Samba and Windows NT servers. smbcacls(1) The smbcacls command is a tool to set ACL's on remote CIFS servers. smbtree(1) The smbtree command is a text-based network neighborhood tool. smbtar(1) The smbtar can make backups of data on CIFS/SMB servers. smbspool(8) smbspool is a helper utility for printing on printers connected to CIFS servers. smbcontrol(1) smbcontrol is a utility that can change the behaviour of running smbd, nmbd and winbindd daemons. rpcclient(1) rpcclient is a utility that can be used to execute RPC commands on remote CIFS servers. pdbedit(8) The pdbedit command can be used to maintain the local user database on a samba server. findsmb(1) The findsmb command can be used to find SMB servers on the local network. net(8) The net command is supposed to work similar to the DOS/Windows NET.EXE command. wbinfo(1) wbinfo is a utility that retrieves and stores information related to winbind. profiles(1) profiles is a command-line utility that can be used to replace all occurrences of a certain SID with another SID. log2pcap(1) log2pcap is a utility for generating pcap trace files from Samba log files. vfstest(1) vfstest is a utility that can be used to test vfs modules. ntlm_auth(1) ntlm_auth is a helper-utility for external programs wanting to do NTLM-authentication. smbcquotas(1) smbcquotas is a tool that can set remote QUOTA's on server with NTFS 5. COMPONENTS
The Samba suite is made up of several components. Each component is described in a separate manual page. It is strongly recommended that you read the documentation that comes with Samba and the manual pages of those components that you use. If the manual pages and documents aren't clear enough then please visit http://devel.samba.org for information on how to file a bug report or submit a patch. If you require help, visit the Samba webpage at http://www.samba.org/ and explore the many option available to you. AVAILABILITY
The Samba software suite is licensed under the GNU Public License(GPL). A copy of that license should have come with the package in the file COPYING. You are encouraged to distribute copies of the Samba suite, but please obey the terms of this license. The latest version of the Samba suite can be obtained via anonymous ftp from samba.org in the directory pub/samba/. It is also available on several mirror sites worldwide. You may also find useful information about Samba on the newsgroup comp.protocol.smb and the Samba mailing list. Details on how to join the mailing list are given in the README file that comes with Samba. If you have access to a WWW viewer (such as Mozilla or Konqueror) then you will also find lots of useful information, including back issues of the Samba mailing list, at http://lists.samba.org. VERSION
This man page is correct for version 4 of the Samba suite. CONTRIBUTIONS
If you wish to contribute to the Samba project, then I suggest you join the Samba mailing list at http://lists.samba.org. If you have patches to submit, visit http://devel.samba.org/ for information on how to do it properly. We prefer patches in git format-patch format. CONTRIBUTORS
Contributors to the project are now too numerous to mention here but all deserve the thanks of all Samba users. To see a full list, look at the change-log in the source package for the pre-CVS changes and at http://git.samba.org/ for the contributors to Samba post-GIT. GIT is the Open Source source code control system used by the Samba Team to develop Samba. The project would have been unmanageable without it. AUTHOR
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 was done by Alexander Bokovoy. Samba 4.0 06/17/2014 SAMBA(7)
All times are GMT -4. The time now is 07:28 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy