Salut a tous,
Voila, je dois configurer un annuaire de personne afin d’instauré une politique de mot de passe au sein de mon entreprise.
J’ai configurer samba ainsi que LDAP, d’ailleurs voici mon code smb.conf
[code][global]
workgroup = TEST
server string = %h server
wins support = yes
WINS Server - Tells the NMBD components of Samba to be a WINS Client
Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
; wins server = w.x.y.z
dns proxy = no
hosts allow = 192.163.3.0/24 127.0.0.1
winbind use default domain = Yes
nt acl support = yes
msdfs root = Yes
hide files = /desktop.ini/ntuser.ini/NTUSER./._/.DS_STORE
time server = yes
name resolve order = lmhosts host wins bcast
The specific set of interfaces / networks to bind to
This can be either the interface name or an IP address/netmask;
interface names are normally preferred
; interfaces = 127.0.0.0/8 eth0
Only bind to the named interfaces and/or networks; you must use the
‘interfaces’ option above to use this.
It is recommended that you enable this feature if your Samba machine is
not protected by a firewall or is a firewall itself. However, this
option cannot handle dynamic or non-broadcast interfaces correctly.
; bind interfaces only = yes
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
security = user
encrypt passwords = true
obey pam restrictions = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = Enter\snew\s\spassword:* %n\n Retype\snew\s\spassword:* %n\n password\supdated\ssuccessfully .
pam password change = yes
domain master = Yes
local master = Yes
domain logons = yes
os level = 40
add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add machine script = /usr/sbin/smbldap-useradd -i "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m “%u” "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x “%u” "%g"
set primary group script = /usr/sbin/smbldap-usermod -g “%g” “%u”
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
case sensitive = No
default case = lower
preserve case = yes
short preserve case = Yes
encrypt passwords = true
passdb backend = ldapsam:ldap://127.0.0.1/
ldap ssl = off
ldap admin dn = cn=samba,dc=ma,dc=base
ldap suffix = dc=ma,dc=base
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Machines
ldap delete dn = Yes
ldap password sync = yes
comment = Home Directories
browseable = no
writable = yes
path = /home/users/%U/docs
valid users = %U,@admingroup
create mode = 0700
directory mode = 0700
[netlogon]
; comment = Network Logon Service
path = /home/export/profile
writable = No
browseable = No
write list = Administrateur
; guest ok = yes
; read only = yes
[profiles]
; comment = Users profiles
path = /home/export/profiles
; guest ok = no
browseable = no
writable = Yes
profile acls = yes
create mask = 0700
directory mask = 0700
[societe]
browseable = no
writeable = yes
admin users = @admingroup,@bossgroup
path = /home/societe
force directory mode = 770
force create mode = 770
comment = Societe
valid users = @bossgroup,sha
create mode = 770
directory mode = 770
[dump]
browseable = no
writeable = yes
admin users = @admingroup,@bossgroup
path = /home/dump
#force directory mode = 770
#force create mode = 770
comment = dump
valid users = @admingroup
create mode = 770
directory mode = 770
[smartbackup]
browseable = no
writeable = yes
admin users = @admingroup,@bossgroup
path = /home/smartbackup
#force directory mode = 770
#force create mode = 770
comment = SmartBackup
valid users = @odmingroup
create mode = 770
directory mode = 770
[www]
comment = apache22
path = /etc/apache2/data/
writeable = yes
valid users = @devgroup,@admingroup
admin users = @admingroup
create mode = 777
directory mode = 777
browseable = no
[partage]
writeable = yes
valid users = @bossgroup,@admingroup,@gamegroup,@devgroup,@graphismegroup,@staffgroup,@comgroup,@seriousgroup,@leelhgroup
admin users = @admingroup
path = /home/partage
create mode = 770
directory mode = 770
force directory mode = 770
force create mode = 770
create mask = 0770
directory mask = 0770
comment = partage
profile acls = yes
inherit permissions = yes
inherit acls = yes
inherit owner = yes
map acl inherit = yes
nt acl support = No
vfs objects = recycle
recycle:keeptree = yes
recycle:versions = yes
recycle:repository = /home/partage/.RecycleBin/%u
recycle:exclude = *.tmp,*.log
recycle:exclude_dir = /home/partage/pole_dev/backups/
[Lazard]
writeable = yes
delete readonly = yes
path = /home/Lazard
force directory mode = 777
force create mode = 777
force user = nobody
comment = Lazard
create mode = 777
public = yes
directory mode = 777
[public]
writeable = yes
delete readonly = yes
path = /home/public
force directory mode = 777
force create mode = 777
force user = nobody
comment = public
create mode = 777
public = yes
directory mode = 777
[users]
browseable = no
writeable = yes
path = /home/users
comment = users home directory
profile acls = yes
unix extensions = yes
[printers]
comment = All Printers
browseable = no
path = /var/spool/samba
printable = yes
guest ok = no
read only = yes
create mask = 0700
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
browseable = yes
read only = yes
guest ok = no
[/code]
Je vois bien mes personnes sur ma base LDAP que je visionne grace à LdapAdmin, mais lorsque je tente de me connecter sur mon domaine avec une machine virtuelle, le chemin réseau du domaine, n’est pas trouvé
Je suis nouveau sur Linux
Merci de vos réponses,
Flake
. Est-ce normal lors de la première connexion ?