论坛徽章:: 0

电梯直达

1楼 [收藏(0)] [报告]

发表于 2009-09-16 09:45 |只看该作者 |倒序浏览

我的域是 2003纯模式。 samba为3.0.21 安装完成后。
wbinfo -t
checking the trust secret via RPC calls succeeded

wbinfo - u wbinfo -g

都是正常的。从xp上能访问/tmp 目录，但就是不能访问 /home/%U自已的目录。
而且正个/home我都把权限改成了777 但还是报错不能访问，这个问题搞了一个星期
没有高天。哎，那位高人指点一下。本人怀疑，是不是 security =domain 要改成security=ads 来重新加入域。

此人的问题跟我一模一样。http://bbs2.chinaunix.net/viewthread.php?tid=703563

我的/etc/samba/smb.conf的配置如下：
[global]

  workgroup = test #域
  netbios name = samba
  server string = samba
  realm = TEST.INTRANET #域名
  hosts allow = 192.168.
  security = domain
  password server = pc.TEST.INTRANET #域控制器
  guest ok = yes
  dns proxy = no

[homes]
      comment = Home Directories
      path = /home/%U

      browseable = no
      writeable = yes

[tmp]  #我共享的目录
      path = /tmp
      writeable = yes
      guest ok = yes

/etc/krb5.conf的配置如下：
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
ticket_lifetime = 24000
default_realm = TEST.INTRANET
dns_lookup_realm = false
dns_lookup_kdc = false

[realms]
TEST.INTRANET = {
  kdc = 192.168.0.x (域控制器的IP)
  admin_server = pc.TEST.INTRANET:749
  default_domain = TEST.INTRANET
}

[domain_realm]
.test.intranet = TEST.INTRANET
test.intranet = TEST.INTRANET

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false