IT筆記-Centos 7.x 安裝Samba服務並登入AD權限

# sudo yum install samba samba-client samba-common -y

# systemctl restart smb //重啟smb服務
# systemctl restart nmb //重啟nmb服務
# systemctl enable smb //設定開機自動啟動smb
# systemctl enable nmb //設定開機自動啟動nmb

# vi /var/log/samba/log.smbd //查看samba Log

如samba Log出現Unable to connect to CUPS server錯誤訊息
# vi /etc/samba/smb.conf
註解掉
; load printers = yes
; printing = cups
加入
load printers = no
printing = bsd
重啟服務
# systemctl restart smb

# vi /etc/samba/smb.conf //開啟 Samba 的設定檔
[global]
        log file = /var/log/samba/log.%m
        load printers = no
        server string = Samba Server Version %v
        printing = bsd
        wins server = ad.domain.com //Wins Server
        workgroup = DOMAIN //預設為MYGROUP，依網域名稱輸入Doamin name
        os level = 20
        winbind trusted domains only = yes
        winbind use default domain = yes
        security = domain //預設為user，需要輸入主機帳號才可登入，AD分享設訂為domain
        passdb backend = tdbsam
        max log size = 50

[Folder] //建立分享資料夾
        writeable = yes
        path = /opt/lampp/htdocs/Folder //分享路徑
        revalidate = yes
        comment = Folder //分享資料夾名稱
        valid users = Jeter,Sam,Cat,Banana //允許存取AD帳號
        create mode = 777
        directory mode = 777

# sudo yum install krb5-workstation realmd sssd samba-common adcli

# sudo vi /etc/sssd/sssd.conf
[sssd]
domains = domain.com //Domain name
config_file_version = 2
services = nss, pam

[domain/domain.com]
ad_domain = domain.com //Domain name
krb5_realm = DOMAIN.COM //Domain name
realmd_tags = manages-system joined-with-samba
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = True
use_fully_qualified_names = False //關閉輸入網域名稱
enumerate = True
fallback_homedir = /home/%u@%d
access_provider = deny

# systemctl restart sssd //重啟sssd服務

# realm join domain.com --user Jeter //以AD使用者登入網域
# Password for adadmin: [PASSWORD] //輸入密碼

# getent passwd //列出使用者
# getent group //列出群組
# realm list //查看AD資訊
# id domain.com\\Jeter //查網域帳號資訊
# id Jeter //查帳號資訊
# chown 'root:domain users' Folder //將Folder資料夾個人權限設定為domain user
# smbstatus //查看使用者使用情況
# testparm         //檢查Samba設定