Samba 3 und Win2K Domäne

[global]
        workgroup = POSCHMANN-GMBH
        netbios name = Samba-Server
        realm = POSCHMANN-GMBH.DE
        idmap uid = 10000-15000
        idmap gid = 10000-15000
        winbind separator = /
        winbind use default domain = Yes
        security = ADS
        encrypt passwords = yes
        password server = w2kpdc01.poschmann-gmbh.de
        client use spnego = no
        adduser script = /usr/sbin/useradd -m %u
        winbind enum users = yes
        winbind enum groups = yes
        # printing = cups
        # printcap name = cups
        # printcap cache time = 750
        # cups options = raw
        # map to guest = Bad User
        # include = /etc/samba/dhcp.conf
        # logon path = \\%L\profiles\.msprofile
        # logon home = \\%L\%U\.9xprofile
        # logon drive = P:
[homes]
        comment = Home Directories
        valid users = %S
        browseable = No
        read only = No
        inherit acls = Yes

[libdefaults]
        default_realm = POSCHMANN-GMBH.DE
        clockskew = 300

[realms]
        POSCHMANN-GMBH.DE = {
                kdc = W2KPDC01.POSCHMANN-GMBH.DE
        }

[domain_realm]
        .poschmann-gmbh.de = POSCHMANN-GMBH.DE

[logging]
#       default = SYSLOG:NOTICE:DAEMON
        default = FILE:/var/log/krb5libs.log
        kdc = FILE:/var/log/kdc.log
        kadmin = FILE:/var/log/kadmin.log

[appdefaults]
        pam = {
                ticket_lifetime = 1d
                renew_lifetime = 1d
                forwardable = true
                proxiable = false
                retain_after_close = false
                minimum_uid = 0
                debug = false

# pam_unix2 config file
#
# This file contains options for the pam_unix2.so module.
# It contains a list of options for every type of management group,
# which will be used for authentication, account management and
# password management. Not all options will be used from all types of
# management groups.
#
# At first, pam_unix2 will read this file and then uses the local
# options. Not all options can be set her global.
#
# Allowed options are:
#
# debug                 (account, auth, password, session)
# nullok                (auth)
# md5                   (password / overwrites /etc/default/passwd)
# bigcrypt              (password / overwrites /etc/default/passwd)
# blowfish              (password / overwrites /etc/default/passwd)
# crypt_rounds=XX
# none                  (session)
# trace                 (session)
# call_modules=x,y,z    (account, auth, password)
#
#  Example:
#  auth:        nullok
#  account:
#  password:    nullok blowfish crypt_rounds=8
#  session:     none
#
auth:           use_winbind
account:        use_winbind
password:       use_winbind
session:        none

#
# /etc/nsswitch.conf
#
# An example Name Service Switch config file. This file should be
# sorted with the most-used services at the beginning.
#
# The entry '[NOTFOUND=return]' means that the search for an
# entry should stop if the search in the previous entry turned
# up nothing. Note that if the search failed due to some other reason
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Legal entries are:
#
#       compat                  Use compatibility setup
#       nisplus                 Use NIS+ (NIS version 3)
#       nis                     Use NIS (NIS version 2), also called YP
#       dns                     Use DNS (Domain Name Service)
#       files                   Use the local files
#       [NOTFOUND=return]       Stop searching if not found so far
#
# For more information, please read the nsswitch.conf.5 manual page.
#

# passwd: files nis
# shadow: files nis
# group:  files nis

passwd: compat winbind
group:  compat winbind
shadow: compat winbind

hosts:  files dns
networks:       files dns