Password for administrator@TEST.JP:
root@2004:~# net ads join -U administrator
Enter administrator’s password:
Using short domain name — TEST
Joined ‘2004’ to dns domain ‘test.jp’
No DNS domain configured for 2004. Unable to perform DNS Update.
DNS update failed: NT_STATUS_INVALID_PARAMETER
root@2004:~# systemctl restart winbind
root@2004:~# wbinfo -u
TEST\guest
TEST\krbtgt
TEST\administrator
TEST\chibi
root@2004:~# wbinfo -n chibi
S-1-5-21-3232992735-2720986143-514732836-1104 SID_USER (1)
root@2004:~# net ads info
LDAP server: 192.168.1.25
LDAP server name: dc1.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 月, 11 5月 2020 15:19:01 JST
KDC server: 192.168.1.25
Server time offset: 1
Last machine account password change: 月, 11 5月 2020 15:18:10 JST
root@2004:~# host -4 dc
dc.test.jp has address 192.168.1.24
root@2004:~# host -4 dc1
dc1.test.jp has address 192.168.1.25
root@2004:~# host -4 dc2
dc2.test.jp has address 192.168.1.26
root@2004:~# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 dc2.test.jp.
_ldap._tcp.test.jp has SRV record 0 100 389 dc1.test.jp.
_ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp.
root@2004:~# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 dc1.test.jp.
_kerberos._udp.test.jp has SRV record 0 100 88 dc2.test.jp.
_kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp.
root@2004:~# host -t A test.jp
test.jp has address 192.168.1.25
test.jp has address 192.168.1.26
test.jp has address 192.168.1.24
root@2004:~# cat /etc/os-release
NAME=”Ubuntu”
VERSION=”20.04 LTS (Focal Fossa)”
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME=”Ubuntu 20.04 LTS”
VERSION_ID=”20.04″
HOME_URL=”https://www.ubuntu.com/”
SUPPORT_URL=”https://help.ubuntu.com/”
BUG_REPORT_URL=”https://bugs.launchpad.net/ubuntu/”
PRIVACY_POLICY_URL=”https://www.ubuntu.com/legal/terms-and-policies/privacy-policy”
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal
root@2004:~# samba -V
Version 4.11.6-Ubuntu
root@2004:~# net ads lookup
Information for Domain Controller: 192.168.1.25
Response Type: LOGON_SAM_LOGON_RESPONSE_EX
GUID: 9f3d8bf8-ac72-42c0-b39a-aa4fd15e44c3
Flags:
Is a PDC: no
Is a GC of the forest: yes
Is an LDAP server: yes
Supports DS: yes
Is running a KDC: yes
Is running time services: yes
Is the closest DC: yes
Is writable: yes
Has a hardware clock: no
Is a non-domain NC serviced by LDAP server: no
Is NT6 DC that has some secrets: no
Is NT6 DC that has all secrets: yes
Runs Active Directory Web Services: yes
Runs on Windows 2012 or later: yes
Forest: test.jp
Domain: test.jp
Domain Controller: dc1.test.jp
Pre-Win2k Domain: TEST
Pre-Win2k Hostname: DC1
Server Site Name: Default-First-Site-Name
Client Site Name: Default-First-Site-Name
NT Version: 5
LMNT Token: ffff
LM20 Token: ffff
root@2004:~# dig test.jp
Ubuntu 20.04 LTS Samba4.6.11 Windows Server 2019 Datacenter Active Directory Domain のメンバーに参加してみた