FreeBSD + Samba + Active Directory

[Tom Judge]

Andrea Venturoli wrote:
> Hello.
>
> I have a setup with two FreeBSD 6.3 domain controllers using samba + 
> openldap + nss_ldap.
> The company might be switching to Active Directory soon (not my 
> choice, before you ask :-), so I might need to reconfigure the two 
> FreeBSD boxes to become AD members (with winbindd, nss, whatever).
>
> I see there's a lot of documentation around and I'm going to read 
> that; here I just want to ask if everything works as advertised, if 
> there are some differences between theory and practice, bugs to watch 
> for, gotchas, etc...
>
> Thanks in advance to anyone who cares to share it's experience.
Here is our recipe:

1) Install security/krb5
2) Install net/samba3 with ADS support and set KRB5_HOME=/usr/local
3) Setup /etc/krb5.conf  and smb.conf
4) Link /usr/local/etc/krb5.conf to /etc/krb5.conf
5) kinit administrator
6) net ads join
7) net ads testjoin

Hope this helps

Tom