пытаюсь подцепить машинку с самбой к домену пишет
[root@servilin etc]# net join -U DLMyakshin
Host is not configured as a member server.
Invalid configuration. Exiting....
Failed to join domain: WERR_INVALID_DOMAIN_ROLE
ADS join did not work, falling back to RPC...
Enter DLMyakshin's password:
Joined domain DBTS. ладно дальше вижу его как вторичный контроллер домена
почему не может работать ADS ?
и где прописать чтобы он был просто членом домена то есть рядовым, а не контроллером ?
нужно LDAP + AD потом буду по папкам доступ делать
вот конфиги:
[global]
realm = DBTS.LOCAL
netbios name = TSERV
server string = File-Server
log file = /var/log/samba/%m.log
log level = 3
max log size = 1024
##insert begin
password server = 192.168.1.100
security = ADS
idmap cache time = 604800
idmap uid = 1000000-2000000
idmap gid = 1000000-2000000
encrypt passwords = Yes
winbind separator = +
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
local master = no
load printers = No
disable spoolss = Yes
show add printer wizard = No
os level = 65
preferred master = No
domain master = No
dns proxy = No
wins support = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
timeserver = yes
deadtime = 15
[homes]
comment = "%U's home directory"
path = /home/%u
valid users = %S
read only = No
browseable = No
[tmp]
comment = Temporary file space
path = /tmp
read only = No
guest ok = Yes
[public]
comment = "Share folders with public documents of stuffs"
path = /home/samba
write list = @smbusers
force group = smbusers
read only = No
create mask = 0664
force create mode = 0664
directory mask = 02775
force directory mode = 02775
volume = "network"
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = DBTS.LOCAL
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes
[realms]
DBTS.LOCAL = {
kdc = DBTS-MAIN.DBTS.LOCAL:88
default_domain = DBTS.LOCAL
}
[domain_realm]
.dbts.local = DBTS.LOCAL
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
nsswich
passwd: files winbind
shadow: files winbind
group: files winbind
#hosts: db files nisplus nis dns
hosts: files dns
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files
rpc: files
services: files
netgroup: nisplus
publickey: nisplus
automount: files nisplus
aliases: files nisplus
