|
|
30.
|
|
|
The LDAP server application provides Directory Services functionality to Windows computers in a manner very similar to Microsoft Active Directory services. Such services include managing the identities and relationships of computers, users, and groups of computers or users that participate in the network, and providing a consistent means to describe, locate, and manage these resources. The freely available implementation of LDAP available for your Ubuntu system is called <emphasis role="italic">OpenLDAP</emphasis>. The server daemons responsible for handling OpenLDAP directory requests and the propagation of directory data from one LDAP server to another on Ubuntu, are <application>slapd</application> and <application>slurpd</application>. OpenLDAP may be used in conjunction with SAMBA to provide File, Print, and Directory services in much the same way a Windows Domain Controller does so long as SAMBA is compiled with LDAP support.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:136(para)
|
|
|
31.
|
|
|
Kerberos
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/network-auth.xml:2023(title)
|
|
|
32.
|
|
|
The Kerberos authentication security system is a standardized service for providing authentication to computers and users by means of a centralized server which grants encrypted authorization tickets accepted for authorization by any other computer using Kerberos. Benefits of Kerberos authentication include mutual authentication, delegated authentication, interoperability, and simplified trust management. The primary server daemons for handling the Kerberos authentication and Kerberos database administration on Ubuntu are <application>krb5kdc</application> and <application>kadmin</application>. SAMBA may use Kerberos as a mechanism for authenticating computers and users against a Windows Domain Controller. To do so, the Ubuntu system must have Kerberos installed, and the <filename>/etc/samba/smb.conf</filename> must be modified to select the the proper <emphasis role="italic">realm</emphasis> and <emphasis role="italic">security</emphasis> mode. For example, edit the <filename>/etc/samba/smb.conf</filename> file and add the values:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:150(para)
|
|
|
33.
|
|
|
realm = DOMAIN_NAME
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:164(emphasis)
|
|
|
34.
|
|
|
security = ADS
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:167(emphasis)
|
|
|
35.
|
|
|
to the file, and save the file.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:169(para)
|
|
|
36.
|
|
|
Be sure to replace the token DOMAIN_NAME in the example above with the actual name of your specific Windows Domain.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:173(para)
|
|
|
37.
|
|
|
You will need to restart the SAMBA daemons to effect these changes. Restart the SAMBA daemons with the following command entered at a terminal prompt:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:177(para)
|
|
|
38.
|
|
|
sudo /etc/init.d/samba restart
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
|
|
|
39.
|
|
|
Computer Accounts
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:189(title)
|
