Poptop MSCHAP2 ADS Howto

9. Samba

Fedora 8 comes with samba v3.0.26a. The current samba RPM version from yum at the time of writing for F8 is v3.0.32. It is highly recommended to use the latest version.

The required RPM packages for samba in Fedora are samba, samba-client, samba-common. Install through yum if any of them is missing.

>     [root@pptp ~]# yum install samba samba-common samba-client

Note: Information on Samba for FC4 / 5 / 6 can be found in Appendix A3.

9.1 Configure Samba

No matter you choose to use winbind or freeradius to connect to Active Directory, you will have to configure samba properly. The configuration file of samba is in /etc/samba and is called smb.conf. The file should have at least the following lines.

>     [global]
>     # define the netbios name of the domain
>     workgroup = EXAMPLE
>     # define the pptp server netbios name
>     netbios name = PPTPDSVR
>     # define the AD domain name
>     realm = EXAMPLENET.ORG
>     # server description
>     server string = pptpd Server
>     # printer stuff
>     printcap name = /etc/printcap
>     load printers = no
>     cups options = raw
>     # log file stuff
>     log file = /var/log/samba/%m.log
>     max log size = 50
>     # must set to ads
>     security = ads
>     # address of domain controller
>     password server = 10.0.0.1
>     # enable encrypt passwords
>     encrypt passwords = yes
>     # default socket options setting on older samba. It is not defined in v3.0.23c or above
>     ;socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>     # not to be a master browser
>     domain master = no
>     preferred master = no
>     # address of the WINS server
>     wins server = 10.0.0.1
>     dns proxy = no
>     # require this line to join the domain in older samba
>     # I don't need this for samba v3.0.23 or above
>     ;client use spnego = yes
>     # winbind stuff
>     idmap uid = 50001-550000
>     idmap gid = 50001-550000
>     winbind separator = +
>     winbind nested groups = Yes
>     winbind enum users=yes
>     winbind enum groups=yes
>     template shell = /bin/false
>     winbind use default domain = no

The lines in bold are the important ones that you should pay attention to. Execute "testparm" to check the configuration. Correct any errors before proceeding to the next step.

Next Previous Content