特殊:Badtitle/NS100:ActiveDirectoryWinbind-SADMS

来自Ubuntu中文
Wikibot留言 | 贡献2010年5月19日 (三) 16:41的版本
跳到导航跳到搜索

{{#ifexist: :ActiveDirectoryWinbind-SADMS/zh | | {{#ifexist: ActiveDirectoryWinbind-SADMS/zh | | {{#ifeq: {{#titleparts:ActiveDirectoryWinbind-SADMS|1|-1|}} | zh | | }} }} }} {{#ifeq: {{#titleparts:ActiveDirectoryWinbind-SADMS|1|-1|}} | zh | | }}

Introduction

The SADMS package allows for automated joining to Active Directory through a GUI interface. This page will describe how to install/troubleshoot using SADMS to join a Ubuntu machine to Active Directory. [[1]]

Acquire the SADMS Ubuntu package

Download the SADMS package from [[2]] Current Ubuntu package as of this writing: [[3]]

Installation

  • Read the tuts from the SADMS site first, under the External Docs section.
  • Extract Package
  • check that nsswitch is correct. Shadow should not reference winbind. Shadow passwords will be retrieved through the pam implementation of winbind.

file: /etc/nsswitch.conf

passwd:         compat winbind
group:          compat winbind
shadow:         compat
  • Install Winbind dependency, then run the START script from the directory you extracted the SADMS archive to:
sudo apt-get install winbind
sudo ./START
  • Detect your Domain settings, fill in the missing information and Install.
  • When you install samba's winbind to Pam, unselect the Pam_mount module as it doesn't seem to install properly through sadms in version 2.0.11, it causes graphical sudo authentications to fail.

Troubleshooting

kdesudo and gksudo failing The pam module pam_mount.so refers to a config file located in /etc/security - pam_mount.conf. pam_mount.conf appears to be configured incorrectly and causing kdesudo and gksudo to break. One must either decipher pam_mount.conf or disable pam from mounting shares at login. /etc/pam.d/common-auth: comment out this line

auth required pam_mount.so

(http://ubuntuforums.org/archive/index.php/t-215791.html) No Logon Servers This is caused by a problem with name resolution of the logon server. The name service cache daemon (nscd) can interfere with winbind, as winbind maintains its own cache. Remove it.

sudo apt-get remove nscd

External Docs

[tutorial from SADMS site] [tutorial from SADMS site]