раздел мы уже создали…
осталось поставить самбу и в ад загнать ее.

делаем конфиг…


регистрация сервера в ад

root@fserver1:/etc/samba# kinit
kinit: Cannot contact any KDC for realm 'WORK.T.RU' while getting initial credentials
root@fserver1:/etc/samba# kinit admin@WORK.T.RU
kinit: Cannot contact any KDC for realm 'WORK.T.RU' while getting initial credentials
root@fserver1:/etc/samba#

проверить чтоб резолв.конф использовал днс ад
и повторяем…

root@fserver1:/etc/samba# kinit admin@WORK.T.RU
Password for admin@WORK.T.RU:
root@fserver1:/etc/samba# net ads join -w WORK.T.RU -U admin
Enter admin's password:
Using short domain name -- WORK
Joined 'FSERVER1' to realm 'work.t.ru'
root@fserver1:/etc/samba#

команда net ads join регистрация в самом ад.

все. по идеи сервер в ад, виден в списке пк сети, зарегистрирован на днс в ад и даже должен пинговаться по имени…

базовый конфиг

root@fserver1:/etc/samba# cat ./smb.conf
###############################3
[global]
    server string = Work File Server (v. %v)
    workgroup = WORK
    realm = WORK.T.RU
    #security = DOMAIN
    security = ADS
    netbios name = FSERVER1
    password server = *
    auth methods = winbind
#*---------------------------------------
    dos charset = CP866
    unix charset = KOI8-R
    display charset = KOI8-R
#*---------------------------------------
    bind interfaces only = Yes
    log level = 0
    log file = /var/log/samba/log-%U
    max log size = 5000
    #####--------------announce as = win2000s
    dns proxy = No
#*---------------------------------------
    ldap ssl = no
    idmap uid = 10000-20000
    idmap gid = 10000-20000
#*---------------------------------------
    winbind separator = +
    winbind enum users = Yes
    winbind enum groups = Yes
    admin users = @"WORK+dz"
    winbind uid = 10000-20000
    winbind gid = 10000-20000
#*---------------------------------------
    #hosts allow = 192.168.20.0/24, 127.
    hosts allow = 192.168.20. 127.
    interfaces = p4p1

#*---------------------------------------
    #socket options = SO_KEEPALIVE SO_BROADCAST TCP_NODELAY SO_RCVBUF=65536 SO_SNDBUF=65536
    socket options=SO_RCVBUF=131072 SO_SNDBUF=131072 TCP_NODELAY SO_KEEPALIVE SO_BROADCAST
    min receivefile size=32768
    use sendfile=true

сам сервер самбы

root@fserver1:~# smbstatus

Samba version 3.6.6
PID     Username      Group         Machine
-------------------------------------------------------------------

Service      pid     machine       Connected at
-------------------------------------------------------

No locked files

не забываем про krb5.conf

[libdefaults]
    default_realm = WORK.T.RU
    dns_lookup_realm = true
    dns_lookup_kdc = true

[realms]
    WORK.T.RU = {
        kdc = DCM.WORK.T.RU
        admin_server = DCM.WORK.T.RU
        kpasswd_server= DCM.WORK.T.RU
    }

и

# /etc/nsswitch.conf
# samba config
passwd: files winbind
shadow: files winbind
group: files winbind

testparm
....
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
....
ulimit -n 16384 от root

p.s. install

root@fserver02:/etc/samba# kinit admin@WORK.T.RU
bash: kinit: команда не найдена
root@fserver02:/etc/samba# apt-get install krb5-user

root@fserver02:/etc# wbinfo -p
bash: wbinfo: команда не найдена
root@fserver02:/etc# apt-get install winbind

root@fserver02:/etc# wbinfo -p

Ping to winbindd succeeded on fd 4

root@fserver02:/etc# wbinfo -t

checking the trust secret via RPC calls succeeded

root@fserver02:/etc# wbinfo -g

должен быть показан список групп

root@fserver02:/etc# wbinfo -u

должен быть показан список юзеров