A little background.  We've had some issues with winbind since the AD servers were all upgraded to Server 2008 R2. The problems have been our (Web Geeks) fault.  We've not been as proactive at upgrading software/servers as often as we should have been. 

The problem is that our Samba version didn't play well with the new Domain Controllers so our Linux servers were removed from the Domain.  This caused an issue since all SSH, FTP and Samba activities were conduncted under Domain accounts.  Also, user 1 (root) was previously set to not be allowed ssh access.

This caused an issue for us since all transfers between our servers (4 servers total) were conducted using SSH and SCP.

After upgrading to Ubuntu 10.04LTS I realized that manually configuring WinBind can be a pain in the neck.  A student suggested that I use Likewise-Open.

Here is the document write up that I created to help me configure likewise-open with future installs.

Installing Ubuntu Server and Likewise-open

1. Install Ubuntu Server 10.04 lts amd64
   1. LAMP
   2. OpenSSH
   3. Samba
2. Install Likewise-Open
   Find the latest stable release of Likewise-Open. At the time of this article's writing the latest was 6.0
   1. Go to http://www.likewise.com/community/index.php/download/ and get the link for the appropriate download.
      Then sudo wget {The Link you just found}
   2. sudo chmod a+x <filename> on the file you just downloaded to make the file executable
   3. Run the file.  Sudo ./<filename>
   4. Follow prompts to install likewise-open
3. Join computer to domain
   
   1. Sudo domainjoin-cli join alfredstate.edu <username>
4. Configure domain settings using /opt/likewise/bin/lwconfig
   1. ./lwconfig
   2. –list: lists all of the settings that can be changed
   3. – detail: gives the details of the setting you specify
   4. sudo ./lwconfig AssumeDefaultDomain true:  sets default domain so all users logging in will be assumed to be ASC/ except local accts
   5. sudo ./lwconfig UserDomainPrefix “PREFIX”
   6. sudo ./lwconfig HomeDirTemplate “/%H/%D/%U” - This sets all domain uers home at /home/<domain>/<uname>
   7. sudo ./lwconfig RequireMembershipOf “ASC\\LinuxAdmins”
   8. sudo ./lwconfig LoginShellTemplate “/bin/bash”
   9. Add all users of group LinuxAdmins to sudoers
5. Edit /etc/sudoers add: %<domain_admin_group> ALL=(ALL) ALL
   1. Restart ssh
6. Configure Samba – edit /etc/samba/smb.conf
   1. workgroup = ALFREDSTATE.EDU
   2. security = ads
   3. realm = <REALM_NAME>
   4. idmap backend = lwopen
   5. idmap uid = 10000-20000
   6. idmap gid = 10000-20000
   7. [homes]
   8. comment = Home Directories
   9. browseable = no
   10. readonly = no
7. Configure SSL/Apache2
   1. https://help.ubuntu.com/10.04/serverguide/C/httpd.html