Linux 使用AD的Samba共享问题
我在Windows Server Enterprise 2008 R2中有一个广告域名。 域名是ferreiradias.local 我已经安装了xubuntu box 16.04,所有更新都已完成。 我已经安装了samba、winbind和krb5客户端以及ntp,并对它们进行了配置。 krb5.conf:Linux 使用AD的Samba共享问题,linux,active-directory,samba,Linux,Active Directory,Samba,我在Windows Server Enterprise 2008 R2中有一个广告域名。 域名是ferreiradias.local 我已经安装了xubuntu box 16.04,所有更新都已完成。 我已经安装了samba、winbind和krb5客户端以及ntp,并对它们进行了配置。 krb5.conf: [libdefaults] ticket_lifetime = 24h default_realm = FERREIRADIAS.LOCAL forwardable = true dns_
[libdefaults]
ticket_lifetime = 24h
default_realm = FERREIRADIAS.LOCAL
forwardable = true
dns_lookup_realm = true
dns_lookup_kdc = true
[realms]
FERREIRADIAS.LOCAL = {
kdc = 192.168.1.3:88
admin_server = DC-FD.FERREIRADIAS.LOCAL
default_domain = FERREIRADIAS.LOCAL
}
[domain_realm]
.FERREIRADIAS.LOCAL = FERREIRADIAS.LOCAL
FERREIRADIAS.LOCAL = FERREIRADIAS.LOCAL
.ferreiradias.local = FERREIRADIAS.LOCAL
ferreiradias.local = FERREIRADIAS.LOCAL
[kdc]
profile = /etc/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb5lib.log
nssswitch.conf
passwd: files winbind
group: files winbind
shadow: files winbind
主机名
nas1
主人
我可以在广告中添加linux框。在那之前一切正常
smb.conf
[global]
security = ADS
realm = FERREIRADIAS.LOCAL
password server = 192.168.1.3
workgroup = ferreiradias
idmap config * : range = 10000-20000
server string = Linuxserver
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 10
winbind use default domain = yes
winbind nested groups = yes
template homedir = /home/%U
template shell = /bin/bash
client use spnego = yes
ntlm auth = yes
lanman auth = no
client ntlmv2 auth = yes
encrypt passwords = yes
restrict anonymous = 2
domain master = no
local master = no
preferred master = no
os level = 0
map to guest = bad user
guest account = nobody
unix extensions = yes
[partilha1]
comment = Marketing
path = /sharing/
valid users =@FERREIRADIAS\jorgcar
writable = yes
read only = no
force create mode = 0777
create mask = 0777
directory mask = 0777
force directory mode = 0777
access based share enum = yes
hide unreadable = yes
问题是,当我试图通过Windows 10/7访问linux设备时,出现了“拒绝访问”错误。有人能给我指一些指南吗?真的很难理解这一点试着添加一行
client max protocol = SMB3
在
至章节[全局]
可能您的samba版本不受支持。尝试添加该行
client max protocol = SMB3
在
至章节[全局]
可能您的samba版本不受支持
/etc/samba/smb.conf