我在使用samba的CentOS 7中遇到Active Directory域控制器问题。
我做域configuration和所有步骤出现没有错误。 我可以以pipe理员身份join一个Windows 10用户。 我为Windows 10安装了RSAT，可以加载域configuration，但无法pipe理域。 如果我想添加一个新的用户或行政单位，不要这样做。 就好像用户没有执行任务的权限。 任何想法的问题？
在这里我的configuration文件和testing命令输出：
[root@dominio ~]# cat /usr/local/samba/etc/smb.conf # Global parameters [global] netbios name = DOMINIO realm = HOME.LOCAL workgroup = HOME dns forwarder = 8.8.8.8 server role = active directory domain controller [netlogon] path = /usr/local/samba/var/locks/sysvol/home.local/scripts read only = No [sysvol] path = /usr/local/samba/var/locks/sysvol read only = No [root@dominio ~]# cat /etc/krb5.conf [libdefaults] default_realm = HOME.LOCAL dns_lookup_realm = false dns_lookup_kdc = true [root@dominio ~]# /usr/local/samba/bin/smbclient -L localhost -U% Domain=[HOME] OS=[] Server=[] Sharename Type Comment --------- ---- ------- netlogon Disk sysvol Disk IPC$ IPC IPC Service (Samba 4.6.6) Domain=[HOME] OS=[] Server=[] Server Comment --------- ------- Workgroup Master --------- ------- [root@dominio ~]# host -t SRV _ldap._tcp.home.local _ldap._tcp.home.local has SRV record 0 100 389 dominio.home.local. [root@dominio ~]# host -t SRV _kerberos._udp.home.local _kerberos._udp.home.local has SRV record 0 100 88 dominio.home.local. [root@dominio ~]# host -t A home.local home.local has address 192.168.10.24 [root@dominio ~]# cat /etc/resolv.conf # Generated by NetworkManager search home.local nameserver 192.168.10.24 [root@dominio ~]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.10.24 dominio dominio.home.local [root@dominio ~]# kinit Administrator Password for [email protected]: Warning: Your password will expire in 41 days on Mon 18 Sep 2017 09:43:18 PM CST [root@dominio ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: [email protected] Valid starting Expires Service principal 08/08/2017 00:00:11 08/08/2017 10:00:11 krbtgt/[email protected] renew until 08/09/2017 00:00:06