[samba-jp:20020] Re: ActiveDirectoryに参加できません。

[三橋 央]

$B8 ＠ MUB-$i$:$G$9$$$^$;$s!#(B

$B3F%U%!%$%k$N ＠ _Dj$G$9$,!"0J2<$NDL$j$G$9!#(B

DC$B$N(BOS     $B!'(BWindows Server 2003
DC$B$N(BFQDN    $B!'(B139-tkydc01.test.local
AD$B%I%a%$%s(B     $B!'(BTEST.LOCAL
Samba$B%^%7%s(B $B!'(BCentossrv

$B-!(B/etc/samba/smb.conf
[global]
	workgroup = TEST
	realm = TEST.LOCAL
	security = ADS
#password server = 10.37.4.1 10.37.4.3
	dos charset = CP932
#server string = Samba Server Version %v
	server string = Samba Server (CentOS Server)
	passdb backend = tdbsam
	ldap ssl = No
	hosts allow = 10.37.38. 127.
	cups options = raw
	log file = /var/log/samba/%m.log

[homes]
	comment = Home Directories
	writeable = yes
	browseable = No

[printers]
#	comment = All Printers
#	path = /var/spool/samba
#	printable = Yes
#	browseable = No

[root]
	comment = All User shared Directories
	path = /root
	guest ok = yes
	guest only = Yes
	writeable = yes
;	printable = No

	netbios name = Centossrv
	idmap uid = 10000-50000
	idmap gid = 10000-50000
	winbind cache time = 15
	winbind separator = @
	winbind use default domain = Yes
	template homedir = /home/%U
;	template shell = /bin/false
;	encrypt passwords = Yes
	obey pam restrictions = Yes
	browseable = no

$B-"(B/etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
default_realm = TEST.LOCAL
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
forwardable = yes

[realms]
TEST.LOCAL = {
kdc = 139-tkydc01.test.local
admin_server = 139-tkydc01.test.local
default_domain = test.local
}

[domain_realm]
.test.local = TEST.LOCAL
test.local = TEST.LOCAL

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
    debug = false
    ticket_lifetime = 36000
    renew_lifetime = 36000
    forwardable = true
    krb4_convert = false
}


$B<j=g$O!"(Bhttp://rina.jpn.ph/~rance/server/mail04.html
$B>e5-%5%$%H$r;2>H$7!"$3$NDL$j$K ＠ _Dj$r9T$$$^$7$?!#(B