Debian10.0 Samba4.9.5 Active Directory Domainの構築と動作確認

root@debian:~# samba-tool domain provision
Realm: TEST.JP
Domain [TEST]:
Server Role (dc, member, standalone) [dc]:
DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]:
DNS forwarder IP address (write ‘none’ to disable forwarding) [192.168.1.74]:
Administrator password:
Retype password:
Looking up IPv4 addresses
Looking up IPv6 addresses
More than one IPv6 address found. Using 2400:4052:46e0:b700:20c:29ff:febe:decd
Setting up share.ldb
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs
Debiam10.0 Samba4.9.5 Active Directory Domainの構築
root@debian:~# cat /etc/os-release
PRETTY_NAME=”Debian GNU/Linux 10 (buster)”
NAME=”Debian GNU/Linux”
VERSION_ID=”10″
VERSION=”10 (buster)”
VERSION_CODENAME=buster
ID=debian
HOME_URL=”https://www.debian.org/”
SUPPORT_URL=”https://www.debian.org/support”
BUG_REPORT_URL=”https://bugs.debian.org/”
root@debian:~# cat /etc/debian_version
10.0
root@debian:~# samba -V
Version 4.9.5-Debian
root@debian:~# kinit administrator
Password for administrator@TEST.JP:
Warning: Your password will expire in 41 days on 2019年08月26日 12時01分40秒
root@debian:~# net ads info
LDAP server: 192.168.1.74
LDAP server name: debian.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 月, 15 7月 2019 12:07:16 JST
KDC server: 192.168.1.74
Server time offset: 0
Last machine account password change: 月, 15 7月 2019 12:01:40 JST
root@debian:~# samba-tool user add chibi
Note: samba-tool user add is deprecated. Please use samba-tool user create for the same function.
New Password:
Retype Password:
User ‘chibi’ created successfully
root@debian:~# host -4 debian
debian.test.jp has address 192.168.1.74
debian.test.jp has IPv6 address 2400:4052:46e0:b700:20c:29ff:febe:decd
root@debian:~# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 debian.test.jp.
root@debian:~# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 debian.test.jp.
root@debian:~# host -t A debian.test.jp.
debian.test.jp has address 192.168.1.74
root@debian:~# smbclient -L localhost -U%
Debiam10.0 Samba4.9.5 Active Directory Domainの動作確認