forum.lissyara.su

Код: Выделить всё

smbldap-adduser -a -m -M user1 -c "User1" user1
smbldap-passwd user1
smbldap-groupmod -m user1 "Domain Admnis"
smbldap-groupshow "Domain Admins" (и он там есть)

Код: Выделить всё

#
# /etc/nsswitch.conf
#
# An example Name Service Switch config file. This file should be
# sorted with the most-used services at the beginning.
#
# The entry '[NOTFOUND=return]' means that the search for an
# entry should stop if the search in the previous entry turned
# up nothing. Note that if the search failed due to some other reason
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Legal entries are:
#
#	nisplus or nis+		Use NIS+ (NIS version 3)
#	nis or yp		Use NIS (NIS version 2), also called YP
#	dns			Use DNS (Domain Name Service)
#	files			Use the local files
#	db			Use the local database (.db) files
#	compat			Use NIS on compat mode
#	hesiod			Use Hesiod for user lookups
#	[NOTFOUND=return]	Stop searching if not found so far
#

# To use db, put the "db" in front of "files" for entries you want to be
# looked up first in the databases
#
# Example:
#passwd:    db files nisplus nis
#shadow:    db files nisplus nis
#group:     db files nisplus nis

Код: Выделить всё

net rpc rights grant "DOMAIN.LOCAL\Domain Admins" SeMachineAccountPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeRemoteShutdownPrivilege SeDiskOperatorPrivilege SeTakeOwnershipPrivilege

Код: Выделить всё

perl ol-schema-migrate.pl -b /usr/share/doc/samba-*/LDAP/samba.schema > /etc/dirsrv/slapd-<server>/schema/61samba.ldif 

Код: Выделить всё

[global]
	workgroup = amber
	netbios name = neptun
	realm = amber.global.com
	nt acl support = yes
	acl compatibility = win2k
	map acl inherit = yes
	server string = Samba Server %v
	interfaces = eth0
	bind interfaces only = yes
	hosts allow = 192.168.7. 127.
	log file = /var/log/samba/log.%m
	debug level = 9
	max log size = 500
	socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
	security = user
	os level = 250
	passdb backend = ldapsam:"ldap://127.0.0.1/"
	enable privileges = yes
	
	passwd program = /usr/sbin/smbldap-passwd "%u"
	passwd chat = *new*password* %n\n *new*password* %n\n *successfully*
	passdb expand explicit = no
	unix password sync = no
	ldap passwd sync = no
	
	ldap suffix = dc=amber,dc=global,dc=com
	ldap admin dn = cn=Manager,dc=amber,dc=global,dc=com
	ldap user suffix = ou=Users
	ldap group suffix = ou=Groups
# Т.к. для самбы компьютеры и пользователи - одно и то же,
# и искать она в дальнейшем записи компьютеров будет в пользователях,
# то для избежания дальнейших проблем при добавлении рабочих станций
# к домену мы вместо следующей строки
#
#	ldap machine suffix = ou=Computers
#
# напишем другую:
	ldap machine suffix = ou=Users
	ldap idmap suffix = ou=Idmap
	idmap backend = ldapsam:ldap://127.0.0.1/
	idmap uid = 10000-20000
	idmap gid = 10000-20000
	
	ldap delete dn = Yes
	ldap ssl = no
	
	
	add user script = /usr/sbin/smbldap-useradd -n -a "%u"
	delete user script = /usr/sbin/smbldap-userdel "%u"
	
	add group script = /usr/sbin/smbldap-groupadd -p "%g"
	delete group script = /usr/sbin/smbldap-userdel "%g"
	
	add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
	delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
	set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
	
	
	add machine script = /usr/sbin/smbldap-useradd -w "%u"
	
	#PDC
	domain master = yes
	preferred master = yes
	#BDC
#	domain master = no
#	preferred master = no
	domain logons = Yes
	

	logon script = 
# Если хотите, что бы профили всех пользователей были перемещаемыми
# и хранились на сервере (со всеми гигабайтами фильмов и личных фотографий)
# то укажите такое значение следующего параметра:
#
#	logon path = \\%L\Profiles\%a\%U
#
# Если вы не хотите гонять профили по сети, оставьте значение пустым, 
# (но ни в коем случае не комментируйте эту строку, она просто получит 
# значение по умолчанию), вот так:
	logon path =
	logon drive = U: 
	logon home = \\%L\users\%U
	
	
#============================ Share Definitions ==============================
[netlogon]
    comment = Network Logon Service
    path = /var/lib/samba/netlogon
    browseable = yes
    guest ok = yes
    writable = no
    share modes = no

[Profiles]
    admin users = admin
    create mode = 600
    directory mode = 700
    path = /var/lib/samba/profiles
    browseable = yes
    guest ok = yes
    writable = yes

[homes]
  comment = Home Directories
  browseable = no
  read only = no

[public]
  path = /pub
  guest ok = yes
  read only = no

[users]
  path = /home/users
  writable = yes
  printable = no