689
edits
Changes
From SME Server
Jump to navigationJump to searchClient Authentication:Fedora (view source)
Revision as of 23:16, 6 November 2009
, 23:16, 6 November 2009no edit summary
You can also add the SME server ip to the list of NTP servers}}
You can also add the SME server ip to the list of NTP servers}}
{{Warning box| On the User setup screen do not select the 'Use Network Login'. This will not work yet, missing packages etc, and will just complicate the setup below}}
Complete install, login and apply all updates.
Complete install, login and apply all updates.
{{Note box| There may be a lot of updates so apply the security fixes as a minimum.
{{Note box| There may be a lot of updates so apply the security fixes as a minimum.
===Additional Packages===
===Additional Packages===
Use the 'System - Administration - Add/Remove Software' or yum to install additional packages
Use the 'System - Administration - Add/Remove Software' or yum to install additional packages
Windows file server (Note this is a group of packages under Package Collections or yum groupinstall
Windows file server (Note this is a group of packages under Package Collections or yum groupinstall)
pam_mount
pam_mount
libtalloc (this needs to be updated if you haven't run all the updates, else samba and the domain join don't work
libtalloc (this needs to be updated if you haven't run all the updates, else samba and the domain join don't work)
===Firewall Modifications===
Open the 'System - Administration - Firewall' and tick
samba
samba-client
as a Trusted services. Don't forget to 'Apply'
===Samba Modifications===
===Samba Modifications===
Open an 'Applications - Accessories - Terminal' cli and change to root privileges
Open 'System - Administration - Services' and enable 'smb'
Open 'System - Administration - Authentication'. This will open an 'Authentication Configuration' dialogue.
{{Tip box| Do not press the 'Join Domain' button until you have completed the changes below on all three of the dialogue tabs}}
On the 'User Information' tab tick 'Enable Winbind Support' and press the 'Configure Winbind ' button.
A 'Winbind Configuration' dialogue opens.
Complete the boxes with the relevant information
Winbind Domain - this is the Windows Workgroup name for your SME Server
Security - set this to domain
Winbind Domain Controllers - this is the ip address of your SME server
Template Shell - set this to /bin/bash
Press OK and change to the 'Authentication' tab. Check 'Enable Winbind Support' is ticked and press the 'Configure Winbind' button.
A 'Winbind Settings' dialogue opens. Check the vlaues are the same as above and press OK
Change to the Options tab and check the following are ticked or set
Use Shadow Passwords
Password Hashing Algorithym - MD5
Local Authorization is sufficient for local users
Create Home directories on first login
Now change back to the 'User Information' tab, press 'Configure Winbind' and then 'Join Domain'
Close this application down.
Open an 'Applications - Accessories - Terminal' cli and change 'su' to root
Open and edit /etc/samba/smb.conf. Find the relevant lines and alter them or uncomment them as below. Some lines may not exist and may need to be added.
Open and edit /etc/samba/smb.conf. Find the relevant lines and alter them or uncomment them as below. Some lines may not exist and may need to be added.
wins server = <ip of sme server>
wins server = <ip of sme server>
name resolve order = wins host lmhosts bcast
name resolve order = wins host lmhosts bcast
security = domain
security = domainsu
password server = <ip of sme server>
password server = <ip of sme server>
socket options = TCP_NODELAY
socket options = TCP_NODELAY
