Difference between revisions of "Using Active Directory for CentOS"

From RSWiki
Jump to navigation Jump to search
 
Line 1: Line 1:
I'am using a default server installation of CentOS with X, KDE and Gnome added. Also i enabled the text editor option for VIM in the package selection section of the installer.
+
I am using a default server installation of CentOS with X, KDE and Gnome added. Also i enabled the text editor option for VIM in the package selection section of the installer.
 +
 +
Also this guide is specific to Samba 3.
 +
 +
Step 1: Edit /etc/krb5.conf to look like the following, substituting EXAMPLE.DIRECTORY and example.directory with your active directory domain name. Where ever block capitals are used then make sure your own domain name is in block capitals also.
 +
 +
[logging]
 +
default = FILE:/var/log/krb5libs.log
 +
kdc = FILE:/var/log/krb5kdc.log
 +
admin_server = FILE:/var/log/kadmind.log
 +
 +
[libdefaults]
 +
ticket_lifetime = 24000
 +
default_realm = EXAMPLE.DIRECTORY
 +
dns_lookup_realm = false
 +
dns_lookup_kdc = false
 +
 +
[realms]
 +
EXAMPLE.DIRECTORY = {
 +
kdc = 10.0.0.1
 +
default_domain = example.directory
 +
}
 +
 +
[domain_realm]
 +
.example.directory = EXAMPLE.DIRECTORY
 +
example.directory = EXAMPLE.DIRECTORY
 +
 +
[kdc]
 +
profile = /var/kerberos/krb5kdc/kdc.conf
 +
 +
[appdefaults]
 +
pam = {
 +
      debug = false
 +
      ticket_lifetime = 36000
 +
      renew_lifetime = 36000
 +
      forwardable = true
 +
      krb4_convert = false
 +
}

Revision as of 14:13, 15 May 2006

I am using a default server installation of CentOS with X, KDE and Gnome added. Also i enabled the text editor option for VIM in the package selection section of the installer.

Also this guide is specific to Samba 3.

Step 1: Edit /etc/krb5.conf to look like the following, substituting EXAMPLE.DIRECTORY and example.directory with your active directory domain name. Where ever block capitals are used then make sure your own domain name is in block capitals also.

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log 

[libdefaults]
ticket_lifetime = 24000
default_realm = EXAMPLE.DIRECTORY
dns_lookup_realm = false
dns_lookup_kdc = false 

[realms]
EXAMPLE.DIRECTORY = {
kdc = 10.0.0.1
default_domain = example.directory
}

[domain_realm]
.example.directory = EXAMPLE.DIRECTORY
example.directory = EXAMPLE.DIRECTORY

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
     debug = false
     ticket_lifetime = 36000
     renew_lifetime = 36000
     forwardable = true
     krb4_convert = false
}