CentOS 7 Deploy samba share with AD integration
Posted On April 3, 2019
We will use SAMBA and WINBIND to setup shares and to join Microsoft domain
Install all necessary packages using yum manager.
yum -y install samba-winbind samba-winbind-clients pam_krb5 krb5-workstation mdadm samba samba-client realmd
Join your windows domain. In our case the name of the domain is lab.local
realm join --user=administrator --client-software=winbind lab.local
Start winbind service and make sure it starts on boot
systemctl start winbind systemctl enable winbind
Make sure you can list AD domain users and groups
wbinfo -u wbinfo -g
Edit samba configuration file and add share information
edit smb.conf # See smb.conf.example for a more detailed config file or # read the smb.conf manpage. # Run 'testparm' to verify the config is correct after # you modified it. [global] workgroup = LAB security = ads passdb backend = tdbsam printing = cups printcap name = cups load printers = yes cups options = raw kerberos method = system keytab template homedir = /home/%U@%D template shell = /bin/bash realm = LAB.LOCAL idmap config LAB : range = 2000000-2999999 idmap config LAB : backend = rid idmap config * : range = 10000-999999 idmap config * : backend = tdb winbind use default domain = no winbind refresh tickets = yes winbind offline logon = yes winbind enum groups = no winbind enum users = no [homes] comment = Home Directories valid users = %S, %D%w%S browseable = No read only = No inherit acls = Yes [printers] comment = All Printers path = /var/tmp printable = Yes create mask = 0600 browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @printadmin root force group = @printadmin create mask = 0664 directory mask = 0775 [data] comment = Public Stuff path = /data read only = No guest ok = Yes browseable = yes
Create share folder
mkdir /data chmod 777 /data systemctl restart samba