{"id":80,"date":"2023-07-13T20:31:21","date_gmt":"2023-07-14T03:31:21","guid":{"rendered":"http:\/\/thejonas.net\/?page_id=80"},"modified":"2023-07-13T20:34:54","modified_gmt":"2023-07-14T03:34:54","slug":"joining-linux-to-ad-domain","status":"publish","type":"page","link":"https:\/\/www.thejonas.net\/?page_id=80","title":{"rendered":"Joining Linux to AD Domain"},"content":{"rendered":"\n

Joining Mint Linux Desktop to SAMBA4 Domain<\/strong>
sudo apt-get install winbind libpam-winbind libnss-winbind krb5-config
Default Kerberos version 5 realm:<\/strong>
MYDC.ABC.LAN
Configure Winbind<\/strong><\/h1>\n\n\n\n

sudo nano \/etc\/samba\/smb.conf
workgroup = MYDC
password server = dcsrv.abc.lan
realm = MYDC.ABC.LAN
security = ads
idmap config * : range = 16777216-33554431
template homedir = \/home\/%U
template shell = \/bin\/bash
winbind use default domain = true
winbind offline logon = true<\/p>\n\n\n\n

sudo nano \/etc\/nsswitch.conf
passwd: compat winbind
group: compat winbind
shadow: compat winbind<\/p>\n\n\n\n

Add at the last line if you need ( auto create a home directory when initial login )<\/strong>
sudo nano \/etc\/pam.d\/common-session
session optional pam_mkhomedir.so skel=\/etc\/skel umask=077<\/p>\n\n\n\n

Add the following right after %admin ALL=(ALL) ALL<\/strong>
sudo visudo
%MYDC\\\\domain^admins ALL=(ALL:ALL) ALL<\/p>\n\n\n\n

Restart the following services:<\/strong>
===sudo initctl restart winbind===
===sudo initctl restart smbd===
===sudo initctl restart nmbd===<\/p>\n","protected":false},"excerpt":{"rendered":"

Joining Mint Linux Desktop to SAMBA4 Domainsudo apt-get install winbind libpam-winbind libnss-winbind krb5-configDefault Kerberos version 5 realm:MYDC.ABC.LANConfigure Winbind sudo nano \/etc\/samba\/smb.confworkgroup = MYDCpassword server = dcsrv.abc.lanrealm = MYDC.ABC.LANsecurity = adsidmap config * : range = 16777216-33554431template homedir = \/home\/%Utemplate shell … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"parent":37,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-80","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.thejonas.net\/index.php?rest_route=\/wp\/v2\/pages\/80","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thejonas.net\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.thejonas.net\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.thejonas.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thejonas.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=80"}],"version-history":[{"count":1,"href":"https:\/\/www.thejonas.net\/index.php?rest_route=\/wp\/v2\/pages\/80\/revisions"}],"predecessor-version":[{"id":82,"href":"https:\/\/www.thejonas.net\/index.php?rest_route=\/wp\/v2\/pages\/80\/revisions\/82"}],"up":[{"embeddable":true,"href":"https:\/\/www.thejonas.net\/index.php?rest_route=\/wp\/v2\/pages\/37"}],"wp:attachment":[{"href":"https:\/\/www.thejonas.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=80"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}