mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-12 17:21:55 -06:00
dd244c02dd
Samba just needs the cifs/ key on the ipa server. Configure samba to use a different keytab file so that we do not risk samba commands (net, or similar) to mess up the system keytab. https://fedorahosted.org/freeipa/ticket/2168
31 lines
807 B
Plaintext
31 lines
807 B
Plaintext
[global]
|
|
workgroup = $NETBIOS_NAME
|
|
realm = $REALM
|
|
kerberos method = dedicated keytab
|
|
dedicated keytab file = FILE:/etc/samba/samba.keytab
|
|
create krb5 conf = no
|
|
security = user
|
|
domain master = yes
|
|
domain logons = yes
|
|
log level = 1
|
|
max log size = 100000
|
|
log file = /var/log/samba/log.%m
|
|
passdb backend = ipasam:ldapi://$LDAPI_SOCKET
|
|
disable spoolss = yes
|
|
ldapsam:trusted=yes
|
|
ldap ssl = off
|
|
ldap admin dn = $SMB_DN
|
|
ldap suffix = $SUFFIX
|
|
ldap user suffix = cn=users,cn=accounts
|
|
ldap group suffix = cn=groups,cn=accounts
|
|
ldap machine suffix = cn=computers,cn=accounts
|
|
rpc_server:epmapper = external
|
|
rpc_server:lsarpc = external
|
|
rpc_server:lsass = external
|
|
rpc_server:lsasd = external
|
|
rpc_server:samr = external
|
|
rpc_server:netlogon = external
|
|
rpc_server:tcpip = yes
|
|
rpc_daemon:epmd = fork
|
|
rpc_daemon:lsasd = fork
|