olá no endian 2.3
tem ums parametros no winbind.conf que estão trocados caso vc altere os mesmos podera configurar sem nemhum problemas em dominio
para ser mais precizo vc preciza alterar 2 arquivos..
/etc/samba/winbind.tmpl e /etc/krb5.conf.tmpl
segue abaixo os modelos
#####################################################################
WINBIND
[global]
security = ADS
password server = $NTLM_PDC.$NTLM_DOMAIN #if $NTLM_BDC != '' then $NTLM_BDC.$NTLM_DOMAIN else ""#
realm = $NTLM_DOMAIN.upper()
# handle logging
syslog only = Yes
log level = 0 winbind:2
syslog = 1
max log size = 1000
local master = no
hosts allow = $SAMBA_ALLOWED_HOSTS
interfaces = $SAMBA_BIND_INTERFACES
bind interfaces only = yes
preferred master = no
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
workgroup = ${AUTH_REALM.split(".")[0].upper()}
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind use default domain = Yes
winbind separator = +
unix charset = UTF8
ntlm auth = Yes
min protocol = NT1
client NTLMv2 auth = Yes
lm announce = No
#try
#include "/var/efw/proxy/smb.custom.tmpl"
#except
#pass
#end try
######################################################################
KRB5.CONF.TMPL
######################################################################
o krb5.conf.tmpl
tem que ficar assim
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
encryption = true
}
[libdefaults]
default_realm = $NTLM_DOMAIN.upper()
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = yes
[realms]
$NTLM_DOMAIN.upper() = {
kdc = ${NTLM_PDC}.${NTLM_DOMAIN} #if $NTLM_BDC != '' then "%s.%s" % ($NTLM_BDC, $NTLM_DOMAIN) else ""#
}
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
#try
#include "/var/efw/proxy/krb5.custom.tmpl"
#except
#pass
#end try
########################################################
no caso é que na versao original esta trocado os campos
AUTH_REALM POR NTLM_DOMAIN
o que fiz foi so direcionar corretamente os campos...
pq neste arquivo e nao nos confs
por que apos vc fazer outra configuração e reiniciar o squid ele excluira as modificações puxando desses arquivos templates..
