Samba as PDC - Revision history

FilipeFonseca at 17:01, 3 August 2023

2023-08-03T17:01:10Z

← Older revision		Revision as of 17:01, 3 August 2023
Line 15:		Line 15:
	mv -v /etc/samba/smb.conf /etc/samba/smb.conf.default		mv -v /etc/samba/smb.conf /etc/samba/smb.conf.default
	#provision domain		#provision domain
	samba-tool domain provision --use-rfc2307 --interactive		samba-tool domain provision --use-rfc2307 --interactive --option="interfaces=lo eth0" --option="bind interfaces only=yes"
	#copy provided krb5		#copy provided krb5
	cp -v /var/lib/samba/private/krb5.conf /etc		cp -v /var/lib/samba/private/krb5.conf /etc

FilipeFonseca at 16:11, 8 February 2022

2022-02-08T16:11:42Z

← Older revision		Revision as of 16:11, 8 February 2022
Line 30:		Line 30:
	systemctl disable smbd nmbd winbind		systemctl disable smbd nmbd winbind
	systemctl unmask samba-ad-dc		systemctl unmask samba-ad-dc
			systemctl enable samba-ad-dc
	systemctl start samba-ad-dc		systemctl start samba-ad-dc
	systemctl status samba-ad-dc		systemctl status samba-ad-dc

FilipeFonseca at 00:31, 8 February 2022

2022-02-08T00:31:43Z

← Older revision		Revision as of 00:31, 8 February 2022
Line 21:		Line 21:
	vi /etc/bind/named.conf		vi /etc/bind/named.conf
	include "/var/lib/samba/bind-dns/named.conf";		include "/var/lib/samba/bind-dns/named.conf";

			#bind-dns allow dns updates:
			vi /etc/bind/options.conf
			tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";

	#set services		#set services

FilipeFonseca at 00:18, 8 February 2022

2022-02-08T00:18:05Z

← Older revision		Revision as of 00:18, 8 February 2022
Line 10:		Line 10:
	#update system and install samba		#update system and install samba
	apt update && apt upgrade		apt update && apt upgrade
	apt install samba krb5-config winbind smbclient #rembember dns backend!		apt install samba krb5-config winbind smbclient #rembember dns backend! (2021)
			apt install samba smbclient winbind libpam-winbind libnss-winbind krb5-kdc libpam-krb5 -y (2022)
	#after successful install		#after successful install
	mv -v /etc/samba/smb.conf /etc/samba/smb.conf.default		mv -v /etc/samba/smb.conf /etc/samba/smb.conf.default

FilipeFonseca at 11:59, 9 July 2021

2021-07-09T11:59:36Z

New page

;Install
<syntaxhighlight lang="bash">
#check hostname
hostname -f
vi /etc/hostname
#add name to hosts
vi /etc/hosts
#remove any traces of unused configurations
rm -v /etc/krb5.conf
#update system and install samba
apt update && apt upgrade
apt install samba krb5-config winbind smbclient #rembember dns backend!
#after successful install
mv -v /etc/samba/smb.conf /etc/samba/smb.conf.default
#provision domain
samba-tool domain provision --use-rfc2307 --interactive
#copy provided krb5
cp -v /var/lib/samba/private/krb5.conf /etc
#bind-dns samba addition
vi /etc/bind/named.conf
include "/var/lib/samba/bind-dns/named.conf";

#set services
systemctl stop smbd nmbd winbind
systemctl disable smbd nmbd winbind
systemctl unmask samba-ad-dc
systemctl start samba-ad-dc
systemctl status samba-ad-dc

</syntaxhighlight>

;Testing
<syntaxhighlight lang="bash">
#test shared folder
smbclient -L localhost -U%
smbclient //localhost/netlogon -UAdministrator -c 'ls'
#check domain level
samba-tool domain level show
#check kerberos auth
kinit -UAdministrator #get ticket
klist #list ticket
kdestroy #remove tickets
</syntaxhighlight>

;Maintenance
<syntaxhighlight lang="bash">
#create domain user
samba-tool user create USER PASSWORD
#disable password expiry
samba-tool user setexpiry USER --noexpiry
samba-tool user setexpiry Administrator --noexpiry #example for Administrator
#chagne user password
samba-tool user setpassword USER PASSWORD
</syntaxhighlight>