MySpace/Docs
1
1
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add homes directory to install-fileserver-as-dc-member.sh

Browse Source
This commit is contained in:
Johan 2024-01-27 12:40:42 +01:00
parent 5f89c625e3
commit 403610a643
1 changed files with 36 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

64
BashScripts/install-fileserver-as-dc-member.sh
View File

@ -110,37 +110,45 @@ EOL
sudo tee /etc/samba/smb.conf > /dev/null <<EOL sudo tee /etc/samba/smb.conf > /dev/null <<EOL
[global] [global]
workgroup = ${WORKGROUP^^} workgroup = ${WORKGROUP^^}
realm = ${DCREALM,,} realm = ${DCREALM,,}
security = ads security = ads
encrypt passwords = yes encrypt passwords = yes
idmap config * : backend = tdb idmap config * : backend = tdb
idmap config * : range = 3000-7999 idmap config * : range = 3000-7999
idmap config ${DCREALM,,} : backend = rid idmap config ${DCREALM,,} : backend = rid
idmap config ${DCREALM,,} : range = 10000-999999 idmap config ${DCREALM,,} : range = 10000-999999
template homedir = /home/%U template homedir = /home/%U
template shell = /bin/bash template shell = /bin/bash
winbind use default domain = true winbind use default domain = true
winbind offline logon = false winbind offline logon = false
[data] [data]
comment = Samba File Server Share comment = Samba File Server Share
path = /var/fileshare/data path = /var/fileshare/data
browsable = yes browsable = yes
guest ok = yes guest ok = yes
read only = no read only = no
create mask = 777 create mask = 777
force create mode = 777 force create mode = 777
directory mask = 777 directory mask = 777
force directory mode = 777 force directory mode = 777
valid users = "@${WORKGROUP^^}\domain users" valid users = "@${WORKGROUP^^}\domain users"
# force user = root # force user = root
# force group = root # force group = root
writeable = yes writeable = yes
# admin users = root # admin users = root
oplocks = yes oplocks = yes
# valid users = @"${DCREALM,,}+Domain Users" # valid users = @"${DCREALM,,}+Domain Users"
[/data] [/data]
[homes]
comment = Home Directories
browsable = yes
read only = no
writeable = yes
oplocks = yes
valid users = %S
[/homes]
EOL EOL
sudo tee /etc/security/pam_winbind.conf > /dev/null <<EOL sudo tee /etc/security/pam_winbind.conf > /dev/null <<EOL