ForumLinux und Active Directory authentication
Riaz Syed – Mittwoch, 15. Juni 2005 13:56 Uhr

Hallo, ich habe folgende Frage, (leider auf Englisch,) vielleicht hat jemand ein Tipp für mich. Vielen Dank und einen schönen Tag. Gruss Riaz

REQUIREMENTS:
1. Linux users should be able to access W2K Server shares using their Active Directory username and password
2. Users should be able to login to Linux using their Active Directory username and password
3. W2K Active directory users should be able to access Linux (Fedora Core 3) Samba shares, using Active Directory username and password.

CONFIGURATION:
– Linux Flavor is Fedora Core 3
– Samba 3.0.14a is installed
– Kerberos version 1.3.4 is installed
– Authentication options using authconfig Linux utility is configured to use Winbind authentication through ADS, providing appropriate Active Directory domain information
– PAM is configured to create home directories for domain users (“mkhomedir.so” stuff)
“root” linux user is assigned an alias of administrator
– Certain Windows user group mapping is done to correspond to Linux groups (e.g. “Domain Users” -> users, “Domain Admins” -> root, etc.)
– A new group “sambagroup” is created both on linux and windows and mapped.

RESULTS:
Working:
– Linux machine joined the domain without any error. Its computer account is visible in Active Directory
– When logged as a local Linux user, Samba Client is able to access windows share using Active Directory account.
– Smbmount on Linux is able to mount windows share using active directory
– Windows Active directory user groups and users list is display on Linux using “wbinfo –u” and wbinfo -g” commands

Not working:
– User cannot login to Linux machine using Active directory account. A message “Authentication failed” is received.
– Tried to access Linux share from windows, if Linux share is not public, then user keeps receiving dialog to enter credentials, the access to share is not possible. The Linux share, which is being accessed, has valid users “root” and “Administrator”. Access is not granted even a valid root/administrator user name and password is provided.

1 Antwort
Riaz Syed – Donnerstag, 16. Juni 2005 10:53 Uhr

Hallo Zusammen,

Wir haben eine Lösung dafür gefunden, falls jemand ähnliches Problem hat, kann sie/er den angefügten Link anschauen.

Vielen Dank das viele meinen Artikel gelesen haben.

Mit schönen Grüssen aus Bern
Riaz

[1] http://mcpmag.com/columns/article.asp?editorialsid=976