Samba簡(jiǎn)介

Samba是一個(gè)在Linux和Unix系統(tǒng)上實(shí)現(xiàn)SMB/CIFS協(xié)議的軟件，通過Samba,用戶可以在本地計(jì)算機(jī)上訪問Windows共享文件和打印機(jī)，同時(shí)也可以實(shí)現(xiàn)文件和打印機(jī)的共享，Samba的主要優(yōu)點(diǎn)是它可以在不安裝Windows操作系統(tǒng)的情況下實(shí)現(xiàn)Windows的功能。

專注于為中小企業(yè)提供成都網(wǎng)站設(shè)計(jì)、成都網(wǎng)站建設(shè)服務(wù),電腦端+手機(jī)端+微信端的三站合一,更高效的管理,為中小企業(yè)友誼免費(fèi)做網(wǎng)站提供優(yōu)質(zhì)的服務(wù)。我們立足成都，凝聚了一批互聯(lián)網(wǎng)行業(yè)人才，有力地推動(dòng)了上千家企業(yè)的穩(wěn)健成長(zhǎng)，幫助中小企業(yè)通過網(wǎng)站建設(shè)實(shí)現(xiàn)規(guī)模擴(kuò)充和轉(zhuǎn)變。

Winbind簡(jiǎn)介

Winbind是Ubuntu 16.04中用于與Active Directory(AD)集成的一個(gè)工具，通過Winbind,Ubuntu系統(tǒng)可以與AD域進(jìn)行通信，實(shí)現(xiàn)用戶和組的管理，Winbind支持本地和域用戶認(rèn)證，以及Kerberos身份驗(yàn)證。

將Ubuntu 16.04添加到AD域的步驟

1、安裝必要的軟件包

在Ubuntu 16.04上，首先需要安裝一些必要的軟件包，如samba、winbind、sssd等，可以使用以下命令安裝這些軟件包：

sudo apt-get update
sudo apt-get install samba winbind sssd smbclient krb5-user libpam-winbind libnss-winbind

2、配置Winbind

編輯/etc/winbind/winbindd.conf文件，添加以下內(nèi)容：

設(shè)置域名
domain = YOURDOMAIN.COM
realm = YOURDOMAIN.COM
idmap config * : backend = tdbsam
idmap config * : range = 10000-99999
idmap config * : override_map = badcred
idmap config * : valid_ids = 10000-99999
idmap config * : runas_script = /usr/lib/winbind/bin/wbrunasid
idmap config * : runas_uid = 500
idmap config * : runas_gid = 500
idmap config * : use_authtoks = true
idmap config * : filter = usercert,krb5pdc,krb5ccname,ldappublicsuffix,dnsroot,reversedomain,hostbasedn,defaultdomain,maxtokenlifetime,supportedenctypes,homedir,loginshell,lastlogoff,lastlogon,wtmpstart,wtmpend,admincount,admincountpwchange,maxbadpassword,minpasswdlen,minclassroomsize,lockoutduration,lockoutthreshold,failedloginattemptlimit,failedlogintimeout,passwdchangetime,passwdexpiretime,passwdhistorysize,maxsessionage,forcettysessauth,forcecommandprompt,allowtpm,winbindenumusers_use_minpwchange_days,winbindenumusers_use_minclassroom_size_days,winbindenumusers_use_minpasswd_length_days,winbindenumusers_use_maxpwage_days,winbindenumusers_use_maxclassroom_size_days,winbindenumusers_use_maxpasswd_length_days,winbindenumusers_use_maxsessionage_days,winbindenumgroups_use_mingroupsize_days,winbindenumgroups_use_minpasswd_length_days,winbindenumgroups_use_maxgroupsize_days,winbindenumgroups_use_maxpasswd_length_days,winbindenumgroups_use_maxsessionage_days

3、配置Samba

編輯/etc/samba/smb.conf文件，添加以下內(nèi)容：

[global]
   workgroup = YOURDOMAIN.COM
   server string = Samba Server %v
   netbios name = yourpcnamehere
   security = user
   map to guest = bad user
   idmap config * : backend = tdbsam
[YOURDOMAIN]
   path = /home/%U/%S
   browsable = yes
   writable = yes
   guest ok = yes

4、重啟Samba服務(wù)和SSSD服務(wù)

使用以下命令重啟Samba服務(wù)和SSSD服務(wù)：

sudo systemctl restart smbd nmbd sshd authconfig winbindd dbus-daemon cups-daemon postfix nginx-wrapper udevd lightdm-syslog-daemon systemd-timesyncd systemd-networkd systemd-resolved systemd-timesyncd systemd-random-seeded systemd-hostnamed systemd-resolve@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random-seeded@localhost systemd-hostnamed@localhost systemd-timesync@localhost systemd-random=yes resolvconf=static network=yournetworkinterface networkconnectivity=auto timezone=Asia/Shanghai failover=proxy protocol=tcp vlan=yourvlan interface=yourethernetinterface domain=YOURDOMAIN.COM locale=zh_CN type=unixio logindefs=UNIX iocharset=utf8 passwd minlen=8 minclassroomsize=1 passwordhistory=7 lockout duration=30 lockout threshold=3 failedloginattempts=3 encrypt passwords=yes useauthtoks=no usefirstpass=no usemsdpchg=no forceseccomp=no forcefieeeparm=no forcefileperms=no strictaes=no auditfailedpwchange=yes auditfailedlockfailure=yes auditfailedlogonfailure=yes auditfailedaccountlockfailure=yes enablehomedirs=yes homedir=%h forceguestok=no forceumask=0022 noguestok=yes anonymizeftplogs=no anonymizeftpextlogs=yes anonymizenames=no anonymizeuids=no anonymizegids=no anonymizemacaddrs=no logfilemode=0644 maxlogfilesize=5M loglevel=INFO maxwriterate=100k maxnprocs=16 maxprocperjob=8 maxjobsperworker=8 maxworkersperchild=16 allowroot=no allowtdelim='' denyroot='' allowanyuid=no portrange=$PORTRANGE hostsallow='' hostsdeny='' hostsexclude='' hostsmatchall='' hostsonly='' netbios name='' netbios scope='' netbios usentlmv2=yes template homedir='' template shell='/bin/bash' template homedir='' template admin='' template adminpw='' template workgroup='' template machinetype='' template lastlogon='' template lastlogoff='' template failedpwchange='' template failedlockfailure='' template failedlogonfailure='' template failedaccountlockfailure='' template enablehomedirs='' template homedir=%h template forceguestok=no template forceumask='0022' template anonymizeftplogs=template anonymizeftpextlogs=template anonymizenames=template anonymizeuids=template anonymizegids=template anonymizemacaddrs=template logfilemode=0644 template maxlogfilesize=5M template loglevel=INFO template maxwriterate=100k template maxnprocs=16 template maxprocperjob=8 template maxjobsperworker=8 template maxworkersperchild

文章名稱：ubuntu添加samba用戶
網(wǎng)頁URL：http://uogjgqi.cn/article/djjsojo.html