Join Samba 3 to Your Active Directory Domain - Page 2
Configure Samba
This example smb.conf shows a basic setup for a printer server and home shares. Shares are configured in the usual manner, only the global section changes when you join to an AD domain.
# Global parameters
'global'
workgroup = BIGSERVER
realm = DOMAIN.NET
preferred master = no
server string = Samba file and print server
security = ADS
encrypt passwords = yes
log level = 3
log file = /var/log/samba/%m
max log size = 50
winbind separator = +
printcap name = cups
printing = cups
idmap uid = 10000-20000
idmap gid = 10000-20000
'homes'
comment = Home Directories
valid users = %S
read only = No
browseable = No
'printers'
comment = All Printers
browseable = no
printable = yes
guest ok = yes
The workgroup is the name of your AD domain. Server string is a comment describing the server, make this anything you want. Log level runs from 0, for no logging, to 10, extreme logging. See man smbd.conf for the rest.
$ testparm
This checks smb.conf for syntax errors. Any errors must be corrected before going ahead. Then start up Samba:
# /etc/init.d/samba start
Finally, join your Samba machine to Active Directory:
# net ads join -U Administrator
Administrator's password:
Joined 'SAMBA1' to realm 'DOMAIN.NET.'
Hurrah! Success. The Samba box will now appear as a machine account under "Computers" in your AD console. Now stop Samba until the final steps are completed.



