samba配置 ad 域 Winbind NSS info

1.首先确认samba版本wbinfo -V

2.其次依照以下配置

Before Samba version 4.6.0:

#Before Samba version 4.6.0:
security = ADS
workgroup = DOMAINNAME
realm = DOMAINNAME.DOMAIN.COM
winbind nss info = rfc2307
idmap config * : backend = tdb
idmap config * : range = 3000-7999
idmap config DOMAIN:backend = ad
idmap config DOMAIN:schema_mode = rfc2307
idmap config DOMAIN:range = 10000-999999

vfs objects = acl_xattr
map acl inherit = yes
store dos attributes = yes

From Samba version 4.6.0:

#From Samba version 4.6.0:
security = ADS
workgroup = DOMAINNAME
realm = DOMAINNAME.DOMAIN.COM

idmap config * : backend = tdb
idmap config * : range = 3000-7999

idmap config DOMAIN:backend = ad
idmap config DOMAIN:schema_mode = rfc2307
idmap config DOMAIN:range = 10000-999999
idmap config DOMAIN:unix_nss_info = yes

vfs objects = acl_xattr
map acl inherit = yes
store dos attributes = yes

 3.最后执行smbcontrol all reload-config