FreeBSD 13.0-CURRENT r348210 Samba4.8.12 Active Directory Domain Controllerの構築と動作確認

root@freebsd:~ # mount -o acls /
root@freebsd:~ # samba-tool domain provision
Realm: TEST.JP
Domain [TEST]:
Server Role (dc, member, standalone) [dc]:
DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]:
DNS forwarder IP address (write ‘none’ to disable forwarding) [192.168.1.8]:
Administrator password:
Retype password:
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up share.ldb
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs
FreeBSD 13.0-CURRENT r348210 Samba4.8.12 Active Directory Domain Controllerの構築
root@freebsd:~ # kinit administrator
administrator@TEST.JP’s Password:
root@freebsd:~ # samba-tool user add chibi
Note: samba-tool user add is deprecated. Please use samba-tool user create for the same function.
New Password:
Retype Password:
User ‘chibi’ created successfully
root@freebsd:~ # wbinfo -u
TEST\administrator
TEST\guest
TEST\krbtgt
TEST\chibi
root@freebsd:~ # wbinfo -n chibi
S-1-5-21-3683702346-2664945195-491150968-1103 SID_USER (1)
root@freebsd:~ # net ads info
LDAP server: 192.168.1.8
LDAP server name: freebsd.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: Sun, 02 Jun 2019 12:23:40 JST
KDC server: 192.168.1.8
Server time offset: 0
Last machine account password change: Sun, 02 Jun 2019 12:20:15 JST
root@freebsd:~ # host -4 freebsd
freebsd.test.jp has address 192.168.1.8
root@freebsd:~ # host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 freebsd.test.jp.
root@freebsd:~ # host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 freebsd.test.jp.
root@freebsd:~ # host -t A freebsd.test.jp.
freebsd.test.jp has address 192.168.1.8
root@freebsd:~ # uname -a
FreeBSD freebsd 13.0-CURRENT FreeBSD 13.0-CURRENT r348210 GENERIC amd64
root@freebsd:~ # samba -V
Version 4.8.12
root@freebsd:~ # smbclient -L localhost -U%
FreeBSD 13.0-CURRENT r348210 Samba4.8.12 Active Directory Domain Controllerの動作確認