Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've tried to figure it out for several months, with no success. I have a Windows 2008R2 domain, and one Linux server (first it was Fedora 15, then 16, and now it's Centos 6.2). I am trying to make it member of the domain to the extent possible. Ideally, I would like to login and get authenticated against domain (say, login 'DOMAIN+john'). If not - at least be able to map directories through Samba with Windows credentials (better, map drives without specifying credentials, and just passing Windows credentials).

I followed several articles, most closely this one; but still can't map the drive (as soon as I switch security from USER to ADS, I can't expand the server)... let alone login. I know I am close (eg., I am getting pam_get_item returned a password from winbind when I log in) - but pointers to something definitive would be great!

share|improve this question
up vote 1 down vote accepted

Look at www.likewiseopen.org

My colleagues at work succeeded to join the AD using their Ubuntu machines, but I couldn't do it on my Debian... I don't think you can do it jusing just Samba.

share|improve this answer
I rebuild the machine (fortunately, I just started to set it up, so it was easier to start from scratch than to undo all the changes that I tried) and I was able to set everything up using PowerBroker Identity Services (formerly likewise open) at the link above! – Felix Mar 16 '12 at 23:09

I don't know if you have already looked at this but there are at lease 2 wikis on point here:

There is also a big article on Enterprise Networking Planet on how to get this done.

share|improve this answer
yes - I started with samba.org articles; should have mentioned that, of course! But didn't see the other one. Thanks! – Felix Mar 15 '12 at 15:52
@Felix Anytime. – Karlson Mar 15 '12 at 15:59
I gave up doing it manually. PBIS from BeyondTrust automated the whole process :D – Felix Mar 16 '12 at 23:13

I wrote up a fair amount of the necessary bits on the Gentoo Wiki here: http://wiki.gentoo.org/wiki/Kerberos_Windows_Interoperability

It is a distillation of many wiki pages, blogs and personal experience.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.