Linux Winbind Setup
From Pumping Station One
Installation
sudo pacman -S krb5 samba
/etc/nsswitch.conf
Add winbind to the passwd and group lines like so:
passwd: files winbind group: files winbind shadow: files
/etc/krb5.conf
Set the default realm to AD.PUMPINGSTATIONONE.ORG (caps matter)
[libdefaults]
default_realm = AD.PUMPINGSTATIONONE.ORG
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes
/etc/samba/smb.conf
[global]
workgroup = PS1
realm = AD.PUMPINGSTATIONONE.ORG
security = ADS
encrypt passwords = Yes
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind trusted domains only = No
winbind nss info = rfc2307
idmap config shortdomainname:range = 500-40000
idmap config shortdomainname:schema_mode = rfc2307
idmap config shortdomainname:backend = ad
idmap config *:range = 70001-80000
idmap config *:backend = tdb
template shell = /bin/bash