Forge Home

winbind

Puppet module to add Linux machines to a Windows domain using Winbind

18,863 downloads

4,486 latest version

4.6 quality score

We run a couple of automated
scans to help you access a
module's quality. Each module is
given a score based on how well
the author has formatted their
code and documentation and
modules are also checked for
malware using VirusTotal.

Please note, the information below
is for guidance only and neither of
these methods should be considered
an endorsement by Puppet.

Version information

  • 0.5.1 (latest)
  • 0.5.0
  • 0.4.2
  • 0.4.1
  • 0.4.0
  • 0.3.0
  • 0.2.2
  • 0.2.1
  • 0.2.0
  • 0.1.0
released Oct 28th 2016
This version is compatible with:

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'jgazeley-winbind', '0.2.2'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add jgazeley-winbind
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install jgazeley-winbind --version 0.2.2

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.

Download
Tags: samba, winbind

Documentation

jgazeley/winbind — version 0.2.2 Oct 28th 2016

winbind

Table of Contents

  1. Overview
  2. Module Description - What the module does and why it is useful
  3. Usage - Configuration options and additional functionality
  4. Limitations - OS compatibility, etc.
  5. Development - Guide for contributing to the module

Overview

Puppet module to add Linux machines to a Windows domain using Winbind. It installs the bare minimum needed to achieve this, and notably does not install or configure the Samba server.

Module Description

Puppet module to add Linux machines to a Windows Active Directory domain using Winbind. As this module fiddles with smb.conf it is not compatible with any other module that affects Samba operations.

This module installs the following facts:

  • ads_domain - the name of the domain the system is currently joined to
  • winbind_version - the version of winbind currently installed on the system
  • netbiosname - a suggested default value for the Netbios name

Usage

Usage of this module is quite straightforward. A minimal example which accepts most defaults is:

class { 'winbind':
  domainadminuser => 'admin',
  domainadminpw   => 'password',
  domain          => 'MYCOMPANY',
  realm           => 'ads.mycompany.org',
}

This example is more extensive and shows every possible option:

class { 'winbind':
  domainadminuser                => 'admin',
  domainadminpw                  => 'password',
  domain                         => 'MYCOMPANY',
  realm                          => 'ads.mycompany.org',
  createcomputer                 => 'Computers/BusinessUnit/Department/Servers',
  netbiosname                    => 'MYWORKSTATION',
  nagioschecks                   => true,
  winbind_max_domain_connections => 8,
  winbind_max_clients            => 500,
  osdata                         => false,
  machine_password_timeout       => 0,
}

domainadminuser

Username of Windows domain admin with sufficient rights to add machines to AD. Required.

domainadminpw

Password of Windows domain admin with sufficient rights to add machines to AD. Required.

domain

NT4-style domain name of your site, e.g. MYCOMPANY. Required.

realm

Realm of your site, e.g. ads.mycompany.org. Required.

createcomputer

OU to create the machine account in. Optional.

netbiosname

Netbios name of the local machine. Optional, max 15 chars, defaults to $::netbiosname.

nagioschecks

Whether to enable Nagios check for domain membership. Has hard-coded parameters and may not work with your Puppet environment. Optional boolean, defaults to false.

winbind_max_domain_connections

Specify the maximum number of simultaneous connections that the winbindd daemon should open to the domain controller of one domain. Setting this parameter to a value greater than 1 can improve scalability with many simultaneous winbind requests, some of which might be slow. Default: 1

winbind_max_clients

Specify the maximum number of clients the winbindd daemon can connect with. Default: 200.

osdata

If true, provide values for osName and osVer (e.g. CentOS and 7). Default: false.

machine_password_timeout

This parameter specifies how often machine password will be changed, in seconds. The default is one week (expressed in seconds), the same as a Windows NT Domain member server. Default: 604800.

Limitations

Written for CentOS 5 and 6 with Samba 3.x. not tested on other platforms. If your distro is not in the list but you know it works, let me know and I'll update the list. If the module needs some extra work to enable support for your distro, send a patch!

This module is not compatible with any other Samba/Winbind modules which touch smb.conf or handle Winbind packages.

Development

Pull requests and issues welcome. No guarantees of fixes, but I'll do my best.

There are lots of additional options for Winbind that can be specified in smb.conf. If you're feeling keen, edit the template and manifest and add these options to the module as parameters.