Red Hat ENTERPRISE LINUX 4.5.0 Reference Manual page 279

• Configuration of the
• Configuration of Kerberos, including the
• Creation of the machine account on the Active Directory domain server
• Association of the member server to the Active Directory domain
To create the machine account and join the Windows 2000/2003 Active Directory, Kerberos
must first be initialized for the member server wishing to join the Active Directory domain. To
create an administrative Kerberos ticket, type the following command as root on the member
server:
root# kinit administrator@EXAMPLE.COM
The command is a Kerberos initialization script that references the Active Directory
kinit
administrator account and Kerberos realm. Since Active Directory requires Kerberos tickets,
obtains and caches a Kerberos ticket-granting ticket for client/server authentication. For
kinit
more information on Kerberos, the
Chapter 19, Kerberos.
To join an Active Directory server (windows1.example.com), type the following command as
root on the member server:
root# net ads join -S windows1.example.com -U administrator%password
Since the machine
windows1
command succeeded), the
kinit
its required administrator account and password. This creates the appropriate machine account
on the Active Directory and grants permissions to the Samba domain member server to join the
domain.
Note
Since
security = ads
backend such as
security = ads
change does not affect functionality and allows local users not previously in the
domain.
3.2.2. Windows NT4-based Domain Member Server
The following
smb.conf
file on the member server
smb.conf
/etc/krb5.conf
/etc/krb5.conf
was automatically found in the corresponding Kerberos realm (the
command connects to the Active Directory server using
net
and not
is not needed. Older clients that do not support
smbpasswd
are authenticated as if
file shows a sample configuration needed to implement a Windows
file, on the member server
file, and the
kinit
is used, a local password
security = user
security = domain
Domain Member Server
command, refer to
had been set. This
255