Line 13: |
Line 13: |
| | | |
| You can also add the SME server ip to the list of NTP servers}} | | You can also add the SME server ip to the list of NTP servers}} |
| + | {{Warning box| On the User setup screen do not select the 'Use Network Login'. This will not work yet, missing packages etc, and will just complicate the setup below}} |
| Complete install, login and apply all updates. | | Complete install, login and apply all updates. |
| {{Note box| There may be a lot of updates so apply the security fixes as a minimum. | | {{Note box| There may be a lot of updates so apply the security fixes as a minimum. |
Line 19: |
Line 20: |
| ===Additional Packages=== | | ===Additional Packages=== |
| Use the 'System - Administration - Add/Remove Software' or yum to install additional packages | | Use the 'System - Administration - Add/Remove Software' or yum to install additional packages |
− | Windows file server (Note this is a group of packages under Package Collections or yum groupinstall | + | Windows file server (Note this is a group of packages under Package Collections or yum groupinstall) |
| pam_mount | | pam_mount |
− | libtalloc (this needs to be updated if you haven't run all the updates, else samba and the domain join don't work | + | libtalloc (this needs to be updated if you haven't run all the updates, else samba and the domain join don't work) |
| + | |
| + | ===Firewall Modifications=== |
| + | Open the 'System - Administration - Firewall' and tick |
| + | samba |
| + | samba-client |
| + | as a Trusted services. Don't forget to 'Apply' |
| | | |
| ===Samba Modifications=== | | ===Samba Modifications=== |
− | Open an 'Applications - Accessories - Terminal' cli and change to root privileges | + | Open 'System - Administration - Services' and enable 'smb' |
− | sudo su
| + | |
| + | Open 'System - Administration - Authentication'. This will open an 'Authentication Configuration' dialogue. |
| + | {{Tip box| Do not press the 'Join Domain' button until you have completed the changes below on all three of the dialogue tabs}} |
| + | On the 'User Information' tab tick 'Enable Winbind Support' and press the 'Configure Winbind ' button. |
| + | A 'Winbind Configuration' dialogue opens. |
| + | Complete the boxes with the relevant information |
| + | Winbind Domain - this is the Windows Workgroup name for your SME Server |
| + | Security - set this to domain |
| + | Winbind Domain Controllers - this is the ip address of your SME server |
| + | Template Shell - set this to /bin/bash |
| + | Press OK and change to the 'Authentication' tab. Check 'Enable Winbind Support' is ticked and press the 'Configure Winbind' button. |
| + | A 'Winbind Settings' dialogue opens. Check the vlaues are the same as above and press OK |
| + | Change to the Options tab and check the following are ticked or set |
| + | Use Shadow Passwords |
| + | Password Hashing Algorithym - MD5 |
| + | Local Authorization is sufficient for local users |
| + | Create Home directories on first login |
| + | Now change back to the 'User Information' tab, press 'Configure Winbind' and then 'Join Domain' |
| + | Close this application down. |
| + | |
| + | Open an 'Applications - Accessories - Terminal' cli and change 'su' to root |
| | | |
| Open and edit /etc/samba/smb.conf. Find the relevant lines and alter them or uncomment them as below. Some lines may not exist and may need to be added. | | Open and edit /etc/samba/smb.conf. Find the relevant lines and alter them or uncomment them as below. Some lines may not exist and may need to be added. |
Line 31: |
Line 58: |
| wins server = <ip of sme server> | | wins server = <ip of sme server> |
| name resolve order = wins host lmhosts bcast | | name resolve order = wins host lmhosts bcast |
− | security = domain | + | security = domainsu |
| password server = <ip of sme server> | | password server = <ip of sme server> |
| socket options = TCP_NODELAY | | socket options = TCP_NODELAY |