|
|
32.
|
|
|
The LDAP server application provides Directory Services functionality to Windows computers in a manner very similar to Microsoft Active Directory services. Such services include managing the identities and relationships of computers, users, and groups of computers or users that participate in the network, and providing a consistent means to describe, locate, and manage these resources. The freely available implementation of LDAP available for your Ubuntu system is called <emphasis role="italic">OpenLDAP</emphasis>. The server daemons responsible for handling OpenLDAP directory requests and the propagation of directory data from one LDAP server to another on Ubuntu, are <application>slapd</application> and <application>slurpd</application>. OpenLDAP may be used in conjunction with SAMBA to provide File, Print, and Directory services in much the same way a Windows Domain Controller does so long as SAMBA is compiled with LDAP support.
|
|
|
|
|
LDAP 服务器应用程序给 Windows 计算机提供了与 Microsoft Active Directory 服务非常相似的目录服务功能。这些服务包括管理加入网络的计算机、用户、计算机组和用户组的身份和关系，为描述、定位和管理这些资源提供一个统一的方法。在你的 Ubuntu 系统中所使用的是 LDAP 的一个自由有效的实现，名为<emphasis role="italic">OpenLDAP</emphasis>，这个名为<application>slapd</application> 和 <application>slurpd</application>的服务守护程序负责处理 OpenLDAP 目录请求和 LDAP 服务器与另一个 Ubuntu 服务器之间的目录数据传送。只要 SAMBA编译时加上LDAP 支持，OpenLDAP 与 SAMBA 一起就可以和Windows域服务器一样以相同的方式提供文件、打印和目录服务。
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:136(para)
|
|
|
33.
|
|
|
Kerberos
|
|
|
|
|
Kerberos
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/network-auth.xml:2023(title)
|
|
|
34.
|
|
|
The Kerberos authentication security system is a standardized service for providing authentication to computers and users by means of a centralized server which grants encrypted authorization tickets accepted for authorization by any other computer using Kerberos. Benefits of Kerberos authentication include mutual authentication, delegated authentication, interoperability, and simplified trust management. The primary server daemons for handling the Kerberos authentication and Kerberos database administration on Ubuntu are <application>krb5kdc</application> and <application>kadmin</application>. SAMBA may use Kerberos as a mechanism for authenticating computers and users against a Windows Domain Controller. To do so, the Ubuntu system must have Kerberos installed, and the <filename>/etc/samba/smb.conf</filename> must be modified to select the the proper <emphasis role="italic">realm</emphasis> and <emphasis role="italic">security</emphasis> mode. For example, edit the <filename>/etc/samba/smb.conf</filename> file and add the values:
|
|
|
|
|
Kerberos 安全认证系统是一个通过一台集中的服务器给计算机和用户提供认证的标准服务，它允许从其他任何使用 Kerberos 的计算机那里接受加密的授权票据。Kerberos 验证的好处包括相互验证，委派验证，互操作性和简单信任管理。在 Ubuntu 中处理 Kerberos 验证和 Kerberos 数据库管理的主要服务器守护程序是 <application>krb5kdc</application> 和 <application>kadmin</application>。相对于 Windows 域控制器SAMBA 可以使用 Kerberos 作为一个用来给计算机和用户授权的机制。为了做到这些，Ubuntu 系统必须安装 Kerberos，同时 <filename>/etc/samba/smb.conf</filename> 也需要修改以选择适当的<emphasis role="italic">realm</emphasis> 和 <emphasis role="italic">security</emphasis> 模式。举个例子，编辑<filename>/etc/samba/smb.conf</filename>文件，并将下列语句：
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:150(para)
|
|
|
35.
|
|
|
realm = DOMAIN_NAME
|
|
|
|
|
realm = DOMAIN_NAME
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:164(emphasis)
|
|
|
36.
|
|
|
security = ADS
|
|
|
|
|
security = ADS
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:167(emphasis)
|
|
|
37.
|
|
|
to the file, and save the file.
|
|
|
|
|
添加到文件中并保存
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:169(para)
|
|
|
38.
|
|
|
Be sure to replace the token DOMAIN_NAME in the example above with the actual name of your specific Windows Domain.
|
|
|
|
|
请确定上面示例中的 DOMAIN_NAME 已经被你的 Windows 域名所代替。
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:173(para)
|
|
|
39.
|
|
|
You will need to restart the SAMBA daemons to effect these changes. Restart the SAMBA daemons with the following command entered at a terminal prompt:
|
|
|
|
|
你需要重启 SAMBA 进程以使改变产生作用。重启 SAMBA 进程可以在终端提示符后输入以下命令：
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:177(para)
|
|
|
40.
|
|
|
sudo /etc/init.d/samba restart
|
|
|
|
|
sudo /etc/init.d/samba restart
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
|
|
|
41.
|
|
|
Computer Accounts
|
|
|
|
|
计算机帐号
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:189(title)
|
