Configurazione Samba

Configuriamo infine samba, in modo da poter usare winbind per il cambio password e poter condividere delle cartelle locali: /etc/samba/smb.conf

[global]
        workgroup = ESEMPIO
        netbios name = c-lnx-001
        realm = ESEMPIO.LAN
        security = domain
        wins server = 192.168.0.1
        use kerberos keytab = yes
        client use spnego = yes
        client NTLMv2 auth = yes

        bind interfaces only = yes
        interfaces = eth0, lo
        hosts allow = 192.168.0.0/24 127.0.0.1

        debug level = 2
        log file = /var/log/samba/%m.log
        max log size = 50
        log level = 1
        syslog = 0
        utmp = Yes

        idmap uid = 10000-15000
        idmap gid = 10000-15000
        template shell = /bin/bash
        template homedir = /srv/home/%U
        winbind separator = +
        winbind enum users = yes
        winbind enum groups = yes
        winbind use default domain = yes

        encrypt passwords = yes
        invalid users = root
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        local master = no
        domain master = no
        dns proxy = no

        preserve case = yes
        short preserve case = no
        default case = lower
        case sensitive = no

        dos charset = cp850
        unix charset = iso8859-1
        display charset = LOCALE
        restrict anonymous = 0

[public]

        path = /samba/public
        writable = yes
        browseable = yes
        share modes = no
        admin users = @"Domain Admins"

aggiungiamo inoltre la seguente riga al file /etc/request-key.conf

create  cifs.spnego     *       *               /usr/sbin/cifs.upcall %k %d

sistemiamo cartelle e permessi:

# mkdir -p /samba/public
# mkdir -p /srv/home
# chgrp "Domain Admins" /samba/public
# rm -rf /etc/samba/*tdb
# rm -rf /var/lib/samba/*tdb
# rm -rf /var/lib/samba/*dat
# rm -rf /var/log/samba/*
# rm -rf /var/cache/samba/*

e avviamo samba e winbind:

# /etc/init.d/samba start
# /etc/init.d/winbind start