mint

samba samba-common samba-vfs-modules samba-ddb-mocules smbclient winbind libnss-winbind libpam-winbind krb5-user krb5-config ntp

mv /etc/samba/smb.conf /etc/samba/smb.conf.back

samba-tool domain provision –use-rfc2307 –interactive.

mv /etc/krb5.conf /etc/krb5.conf.back
ln –s /var/lib/samba/private/krb5.conf /etc/

systemctl unmask samba-ad-dc
systemctl enable samba-ad-dc

2)Modificar /etc/krb5.conf:
[libdefaults]
default_realm = HPERRANDO.LOCAL
clockskew = 300

[realms]
HPERRANDO.LOCAL = {
kdc = servhperrando
default_domain = hperrando.local
# admin_server = servhperrando.hperrando.local
}

[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb5lib.log
[domain_realm]
.hperrando.local = HPERRANDO.LOCAL
hperrando.local = HPERRANDO.LOCAL
[appdefaults]
pam = {
ticket_lifetime = 1d
renew_lifetime = 1d
forwardable = true
proxiable = false
retain_after_close = false
minimum_uid = 0
try_first_pass = true
}

[domain_reaml]
	.asir3.local = ASIR3.LOCAL
	asir3.local = ASIR3.LOCAL

archivo smb.conf
client use spnego = yes
security = ads
smbpasswd -a USERNAME crear

smbpasswd -e USERNAME enable