Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a small Windows domain, contains DHCT, DNS, Active Directory, CA etc.

I'm trying to connect a SLED 11 to the domain according to found-by-Google-search guides but all what I've found was irrelevant and not up to date.

Can someone please link me to an up to date, clear one?

(What I want to be able to do is to log-on to the SUSE machine with a Windows active directory user, and to mount Windows shared folders).

Thank you very much!!

share|improve this question

I don't have a complete howto, but first look up Samba's docs on setting up a Domain Member and joining it to the domain. At some point you will run a command like "net ads join -U Administrator" You must have a smb.conf file with security = ads and workgroup = domain.local. You will probably also need the MIT Kerberos packages installed at some point. Once Samba on the workstation has successfully joined ADS, you can set up PAM and NSS modules to use Samba for login and user listing. I think it's pam_winbind and nss_winbind you will need installed, but not 100% sure. Take a look at the Samba HOW-TO about domain membership: http://samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html Hope this helps!

share|improve this answer

I don't know about details for Suse, but we've been doing this on gentoo and ubuntu with a combination of kerberos, ldap, and nss. I'll have to look for a reference. I don't think we have any external documentation.

share|improve this answer
Thank you for replying. I'll be thankful if you can add more details about the required steps. – rursw1 Dec 14 '10 at 7:49

I'm running openSuSE 11.4 and there is a section in Yast: Network Services > Windows Domain Membership which automates this entire process.

I've done this before by hand on other distos and there is a lot of work that goes with it including updated pam, the nssswitch.conf, etc. I'd highly suggest using the Yast interface if you have that option in the enterprise version.

share|improve this answer

I think this might help you out a lot, in particular page 8.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.