Figure 1 : Configuration de l'authentification
[root@localhost source]# export SAMBA_SOURCE=`pwd`
[root@localhost source]# ./configure --prefix=/usr/local/samba --with-winbind
[root@localhost source]# make
[root@localhost source]# make install
[root@localhost root]# export SAMBA_HOME=/usr/local/samba
#!/bin/sh
#
# chkconfig: - 91 35
# description: Starts and stops the Samba smbd and nmbd daemons \
# used to provide SMB network services.
#
# pidfile: /usr/local/samba/var/locks/smbd.pid
# pidfile: /usr/local/samba/var/locks/nmbd.pid
# pidfile: /usr/local/samba/var/locks/winbind.pid
# config: /usr/local/samba/lib/smb.conf
# Source function library.
if [ -f /etc/init.d/functions ] ; then
. /etc/init.d/functions
elif [ -f /etc/rc.d/init.d/functions ] ; then
. /etc/rc.d/init.d/functions
else
exit 0
fi
# Avoid using root's TMPDIR
unset TMPDIR
# Source networking configuration.
. /etc/sysconfig/network
if [ -f /etc/sysconfig/samba ]; then
. /etc/sysconfig/samba
fi
# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
# Check that smb.conf exists.
[ -f /usr/local/samba/lib/smb.conf ] || exit 0
# Check that we can write to it... so non-root users stop here
[ -w /usr/local/samba/lib/smb.conf ] || exit 0
RETVAL=0
export SMBDOPTIONS=-D
export NMBDOPTIONS=-D
export WINBINDOPTIONS=-B
start() {
KIND="SMB"
echo -n $"Starting $KIND services: "
daemon /usr/local/samba/sbin/smbd $SMBDOPTIONS
RETVAL=$?
echo
KIND="NMB"
echo -n $"Starting $KIND services: "
daemon /usr/local/samba/sbin/nmbd $NMBDOPTIONS
RETVAL2=$?
echo
KIND="Winbind"
echo -n $"Starting $KIND services: "
daemon /usr/local/samba/sbin/winbindd "$WINBINDOPTIONS"
RETVAL3=$?
echo
[ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] \
&& touch /usr/local/samba/var/locks/subsys/smb \
&& touch /usr/local/samba/var/locks/subsys/winbindd || RETVAL=1
return $RETVAL
}
stop() {
KIND="SMB"
echo -n $"Shutting down $KIND services: "
killproc /usr/local/samba/sbin/smbd -TERM
RETVAL=$?
[ $RETVAL -eq 0 ] && rm -f /usr/local/var/locks/smbd.pid
echo
KIND="NMB"
echo -n $"Shutting down $KIND services: "
killproc /usr/local/samba/sbin/nmbd -TERM
RETVAL2=$?
[ $RETVAL2 -eq 0 ] && rm -f /usr/local/var/locks/nmbd.pid
echo
KIND="Winbind"
echo -n $"Shutting down $KIND services: "
killproc /usr/local/samba/sbin/winbindd -TERM
RETVAL3=$?
[ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] \
&& rm -f /usr/local/samba/var/locks/subsys/smb \
&& rm -f /usr/local/samba/var/locks/winbindd.pid \
&& rm -f /usr/local/samba/var/locks/subsys/winbindd
echo ""
return $RETVAL
}
restart() {
stop
start
}
reload() {
echo -n $"Reloading smb.conf file: "
killproc /usr/local/samba/sbin/smbd -HUP
RETVAL=$?
echo
return $RETVAL
}
rhstatus() {
status /usr/local/samba/sbin/smbd
status /usr/local/samba/sbin/nmbd
status /usr/local/samba/sbin/winbindd
}
case "$1" in
start)
start
;;
stop)
stop
;;
restart)
restart
;;
reload)
reload
;;
status)
rhstatus
;;
condrestart)
[ -f /usr/local/var/locks/subsys/smb ] && restart || :
;;
*)
echo $"Usage: $0 {start|stop|restart|reload|status|condrestart}"
exit 1
esac
exit $?
[root@localhost root]# rpm -ivh krb5-workstation-1.3.6-4
[root@localhost root]# yum install krb5-workstation
[libdefaults]
default_realm = CAMPUS.ENST-BRETAGNE.FR
[realms]
CAMPUS.ENST-BRETAGNE.FR =
{
kdc = X.Y.Z.T
}
[root@localhost root]# kinit alenorcy@CAMPUS.ENST-BRETAGNE.FR Password for alenorcy@CAMPUS.ENST-BRETAGNE.FR:
[root@localhost root]# cp $SAMBA_SOURCE/nsswitch/libnss_winbind.so /lib [root@localhost root]# ln -s /lib/libnss_winbind.so /liblibnss_winbind.so.2
passwd: files winbind shadow: files winbind group: files winbind hosts: files dns bootparams: files ethers: files netmasks: files networks: files protocols: files winbind rpc: files services: files winbind automount: files winbind aliases: files netgroup: files winbind
[libdefaults]
default_realm = CAMPUS.ENST-BRETAGNE.FR
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
CAMPUS.ENST-BRETAGNE.FR = {
kdc = X.Y.Z.T
admin_server = X.Y.Z.T
}
CAMPUS.ENST-BRETAGNE.FR = {
kdc = X.Y.Z.T
admin_server = X.Y.Z.T
}
#%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required /lib/security/$ISA/pam_env.so auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok auth sufficient /lib/security/$ISA/pam_winbind.so use_first_pass auth required /lib/security/$ISA/pam_deny.so account sufficient /lib/security/$ISA/pam_succeed_if.so uid < 100 account required /lib/security/$ISA/pam_unix.so account [default=bad success=ok user_unknown=ignore] /lib/security/$ISA/pam_winbind.so password requisite /lib/security/$ISA/pam_cracklib.so retry=3 password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok md5 shadow password sufficient /lib/security/$ISA/pam_winbind.so use_authtok password required /lib/security/$ISA/pam_deny.so session required /lib/security/$ISA/pam_limits.so session required /lib/security/$ISA/pam_unix.so
passwd: files winbind shadow: files group: files winbind hosts: files dns bootparams: files ethers: files netmasks: files networks: files protocols: files rpc: files services: files automount: files aliases: files netgroup: files
[global] workgroup = CAMPUS server string = Serveur samba! realm = CAMPUS.ENST-BRETAGNE.FR security = ads encrypt passwords = yes password server = X.Y.Z.T log file = /var/log/samba/smbd.log max log size = 50 winbind uid = 10000-20000 winbind gid = 10000-20000 winbind separator = + [partage] comment=Répertoire partagé path=/usr/local/samba valid users = CAMPUS+alenorcy browseable = true writable = true
[root@localhost root]# service smb start Démarrage des services SMB : [ OK ] Démarrage des services NMB : [ OK ] Démarrage des services Winbind : [ OK ]
[root@localhost root]# net join -S LEPDC -U user%password ... Joined ‘ARCHIVAGE' to realm ‘CAMPUS.ENST-BRETAGNE.FR'
[root@archivage root]# $SAMBA_HOME/bin/wbinfo -u
[root@archivage root]# $SAMBA_HOME/bin/wbinfo -g
[root@archivage root]# getent passwd
[root@archivage root]# getent group