建站
咨詢
售后
建站咨詢
新聞中心
realm join --user=AD_admin_user domain_name “ ，AD_admin_user是具有加入域權(quán)限的AD管理員用戶名，domain_name是您的域名稱。 簡介
Active Directory(AD)域是一種用于組織和管理計算機資源的分布式數(shù)據(jù)庫系統(tǒng)，在企業(yè)環(huán)境中，通常會將Linux機器加入到Windows AD域中，以實現(xiàn)對這些機器的集中管理和權(quán)限控制，本文將介紹如何在Linux機器上安裝和配置Samba服務(wù)，使其能夠加入到Windows AD域中。
為瀘縣等地區(qū)用戶提供了全套網(wǎng)頁設(shè)計制作服務(wù)，及瀘縣網(wǎng)站建設(shè)行業(yè)解決方案。主營業(yè)務(wù)為成都做網(wǎng)站、網(wǎng)站制作、瀘縣網(wǎng)站設(shè)計，以傳統(tǒng)方式定制建設(shè)網(wǎng)站，并提供域名空間備案等一條龍服務(wù)，秉承以專業(yè)、用心的態(tài)度為用戶提供真誠的服務(wù)。我們深信只要達到每一位用戶的要求，就會得到認可，從而選擇與我們長期合作。這樣，我們也可以走得更遠！
準(zhǔn)備工作
1、確保Linux機器已安裝Samba服務(wù)，如果沒有安裝，可以使用以下命令進行安裝：
對于基于Debian的系統(tǒng)(如Ubuntu):
“`
sudo apt-get update
sudo apt-get install samba samba-common-bin
“`
對于基于RPM的系統(tǒng)(如CentOS):
“`
sudo yum install samba samba-common
“`
2、確保Windows AD域控制器已啟動并運行正常，可以通過查看Windows管理界面或使用ipconfig命令來檢查網(wǎng)絡(luò)連接狀態(tài)。
3、在Linux機器上生成Samba用戶名和密碼，可以使用以下命令生成一個隨機的用戶名和密碼：
“`
sudo smbpasswd -a username
“`
username是你要創(chuàng)建的Samba用戶的名稱，執(zhí)行此命令后，系統(tǒng)會提示你輸入密碼，輸入兩次新密碼以確認。
配置Samba服務(wù)
1、編輯Samba配置文件/etc/samba/smb.conf,添加以下內(nèi)容：
“`
[global]
workgroup = WORKGROUP
security = user
map to guest = bad user
dns proxy = no
winbind refresh tickets = yes
winbind offline logon = false
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
winbind cache credentials = yes
winbind allow anonymous = no
local master = no
log file = /var/log/samba/%m.log
log level = %v
pid file = /var/run/smbd/%h.pid
lock file = /var/run/smbd/%h.lock
encrypt passwords = yes
use chpasswd = yes
force user = nobody
realm = WORKGROUP.example.com
security = ads
domain master = no
client signing = no
kerberos method = secrets and keytabs
kerberos keytab =$KRB5CCNAME:$KRB5_KEYTAB_FILENAME
kerberos ticket cache type = files
kerberos ticket cache keys = $KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000000.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000001.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000002.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000003.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000004.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000005.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000006.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000007.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000008.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME0000000009.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME000000001A.keytab,$KRB5CCNAME:$KRB5_KEYTAB_FILENAME[next available krb5ccname]$.keytab (replace [next available krb5ccname] with the next available krb5ccname in the list)
kerberos keytab list = \computernameadmin$@REALM$*.keytab,\computernameadmin$@REALM$*.pem,\computernameadmin$@REALM$*.ccache,\computernameadmin$@REALM$*.db,\computernameadmin$@REALM$*.tdb,computernameadmin$@REALM$*.tdb2,computernameadmin$@REALM$*.lockout,\computernameadmin$@REALM$*.bakpasswd,\computernameadmin$@REALM$*.paxauthinfo,computernameadmin$@REALM$*.smbcredentials,\computernameadmin$@REALM$*.smb1credentials,\computername.example.comadministrator@REALM$*.keytab (replace computername with the name of your computer and domain with your domain name) (replace REALM with your domain name and admin username with your administrator username) (replace * with a unique identifier for each keytab file) (replace pax auth info file with the path to the pax auth info file on the server) (replace SMB1 credentials file with the path to the SMB1 credentials file on the server) (replace Samba credentials file with the path to the Samba credentials file on the server) (replace Kerberos database file with the path to the Kerberos database file on the server) (replace lockout file with the path to the lockout file on the server) (replace backup password file with the path to the backup password file on the server) (replace PAX authentication information file with the path to the PAX authentication information file on the server) (replace Samba password cache file with the path to the Samba password cache file on the server) (replace Kerberos ticket cache file with the path to the Kerberos ticket cache file on the server) (replace Kerberos database cache file with the path to the Kerberos database cache file on the server) (replace Kerberos ticket cache keys with a list of all keytab files that should be used when authenticating to AD) (replace SMB1 credentials cache with a list of all SMB1 credentials files that should be used when authenticating to AD) (replace Samba credentials cache with a list” or ”list” of all Samba credentials files that should be used when authenticating to AD) (replace Kerberos database cache with a list of all Kerberos database files that should be used when authenticating to AD) (replace lockout cache with a list” or ”list” of all lockout files that should be used when authenticating to AD) (replace backup password cache with a list” or ”list” of all backup password files that should be used when authenticating to AD) (replace PAX authentication information cache with a list” or ”list” of all PAX authentication information files that should be used when authenticating to AD) (replace Samba password cache with a list” or ”list” of all Samba password cache files that should be used when authenticating to AD) (replace Kerberos ticket cache keys with a list of all keytab files that should be used when authenticating to AD) (replace SMB1 credentials cache with a list” or ”list” of all SMB1 credentials files that should be used when authenticating to AD) (replace Samba credentials cache with a list” or ”list” of all Samba credentials files that should be used when authenticating to AD) (replace Kerberos database cache with a list” or ”list” of all Kerberos database files that should is
網(wǎng)頁標(biāo)題：linux加入ad域的方式
瀏覽地址：http://m.fisionsoft.com.cn/article/cohceog.html
