SAMBA Cross-Domain Trust File Server - Revision history

Michael.mast: /* Samba Config */

2020-11-18T15:47:55Z

Samba Config

2020-01-23T15:59:32Z

Packages and Domain

2020-01-23T14:57:59Z

2020-01-23T14:48:07Z

AD Authentication

2020-01-23T14:46:07Z

Other

2020-01-23T14:42:23Z

Using SSSD

2020-01-23T14:40:44Z

Other

2020-01-23T14:39:28Z

AD Authentication

2020-01-23T14:32:05Z

Samba Config

2020-01-23T14:29:21Z

Using SSSD

@@ Line 71: / Line 71: @@
          printcap name = /dev/null
          disable spoolss = yes
 </pre>
 *<ref>https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting</ref>Create file /etc/samba/user.map with the following

@@ Line 20: / Line 20: @@
 sudo hostnamectl set-hostname smbshare
 sudo timedatectl set-timezone America/New_York
-sudo yum -y install epel-release yum-cron firewalld
+sudo yum -y install yum-cron firewalld
 sudo systemctl enable --now firewalld
 sudo systemctl enable --now yum-cron

@@ Line 134: / Line 134: @@
 The username or password was not correct.
 Connection failed: NT_STATUS_LOGON_FAILURE
 </pre>

@@ Line 87: / Line 87: @@
 ===AD Authentication===
-====Using SSSD====
+====Using winbind====
 <ref>https://wiki.centos.org/TipsAndTricks/WinbindADS</ref>
 <ref>https://www.server-world.info/en/note?os=CentOS_7&p=samba&f=3</ref>
 <pre>
-sudo yum -y install samba-winbind samba-winbind-clients pam_krb5
+sudo yum -y install samba-winbind samba-winbind-clients
 sudo net ads join -U michael.mast
 </pre>
-Edit /etc/nsswitch.conf and add winbind for passwd and group, in example:
+*Edit /etc/nsswitch.conf and add winbind for passwd and group, in example:
 <pre>
 ...
@@ Line 145: / Line 103: @@
 ...
 </pre>
-Start services
+*Start services
 <pre>
 sudo systemctl enable --now smb
@@ Line 151: / Line 109: @@
 sudo systemctl enable --now winbind
 </pre>
-Grant SeDiskOperatorPrivilege
+*Grant SeDiskOperatorPrivilege
 <pre>
 net rpc rights grant 'DOMAIN1\linuxadmins' SeDiskOperatorPrivilege -U'DOMAIN1\michael.mast'
 Enter DOMAIN1\michael.mast's password:
 Successfully granted rights.
 </pre>

@@ Line 150: / Line 150: @@
 sudo systemctl enable --now nmb
 sudo systemctl enable --now winbind
 </pre>

@@ Line 97: / Line 97: @@
 *At this point we want to make sure a domain security group can manage the share from a Windows server. In my case I created a linuxadmins group.
 <pre>
-net rpc rights grant "DOMAIN1\lunixadmins' SeDiskOperatorPrivilege -U'DOMAIN1\michael.mast'
+net rpc rights grant 'DOMAIN1\lunixadmins' SeDiskOperatorPrivilege -U'DOMAIN1\michael.mast'
 </pre>
 However, at the time of this writing I am unable to get this to work. Getting the following error

@@ Line 144: / Line 144: @@
 group:      files winbind sss
 ...
 </pre>

@@ Line 46: / Line 46: @@
 sudo yum -y install samba
 </pre>
-*This smb.conf global entry was created using the referenced wiki.samba.org links, as well as referencing a smb.conf file from a FreeNAS server.
+*This smb.conf global entry was created using the referenced wiki.samba.org links, as well as referencing a smb.conf file from a FreeNAS server.<br>
 <pre>
 [global]
@@ Line 64: / Line 65: @@
          store dos attributes = Yes
          username map = /etc/samba/user.map
 </pre>
 *<ref>https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting</ref>Create file /etc/samba/user.map with the following

@@ Line 84: / Line 84: @@
 *Install kerberose and related packages, will join later. <ref>https://github.com/sous-chefs/samba/issues/88</ref> Don't forget sssd-libwbclient.
 <pre>
-sudo yum install -y realmd krb5-workstation oddjob oddjob-mkhomedir sssd samba-common samba-common-tools sssd-libwbclient
+sudo yum install -y realmd krb5-workstation oddjob oddjob-mkhomedir sssd sssd-libwbclient
 sudo systemctl enable --now sssd
 sudo realm join -U <username> domain1.tld