root@1804:~# kinit administrator
Password for administrator@TEST.JP:
root@1804:~# net ads join -U administrator
Enter administrator’s password:
Using short domain name — TEST
Joined ‘1804’ to dns domain ‘test.jp’
No DNS domain configured for 1804. Unable to perform DNS Update.
DNS update failed: NT_STATUS_INVALID_PARAMETER
root@1804:~# systemctl restart winbind
root@1804:~# wbinfo -u
TEST\administrator
TEST\guest
TEST\krbtgt
TEST\chibi
root@1804:~# wbinfo -n chibi
S-1-5-21-4252828235-1945649609-3318306072-1103 SID_USER (1)
root@1804:~# net ads info
LDAP server: 192.168.1.28
LDAP server name: dc.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 木, 10 9月 2020 18:47:51 JST
KDC server: 192.168.1.28
Server time offset: -3
Last machine account password change: 木, 10 9月 2020 18:47:03 JST
root@1804:~# host -4 dc
dc.test.jp has address 192.168.1.27
dc.test.jp has address 192.168.1.28
dc.test.jp has IPv6 address 2400:4052:46e0:b700:5440:7997:1f70:6066
dc.test.jp has IPv6 address 2400:4052:46e0:b700:5021:a5ac:5882:f185
root@1804:~# host -4 dc1
dc1.test.jp has address 192.168.1.30
dc1.test.jp has IPv6 address 2400:4052:46e0:b700:79f0:d44d:dc7a:b245
root@1804:~# host -4 dc2
dc2.test.jp has address 192.168.1.53
dc2.test.jp has IPv6 address 2400:4052:46e0:b700:d9fb:4f0:1b8c:d399
root@1804:~# host -t A test.jp
test.jp has address 192.168.1.27
test.jp has address 192.168.1.30
test.jp has address 192.168.1.28
test.jp has address 192.168.1.53
root@1804:~# cat /etc/os-release
NAME=”Ubuntu”
VERSION=”18.04.5 LTS (Bionic Beaver)”
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME=”Ubuntu 18.04.5 LTS”
VERSION_ID=”18.04″
HOME_URL=”https://www.ubuntu.com/”
SUPPORT_URL=”https://help.ubuntu.com/”
BUG_REPORT_URL=”https://bugs.launchpad.net/ubuntu/”
PRIVACY_POLICY_URL=”https://www.ubuntu.com/legal/terms-and-policies/privacy-policy”
VERSION_CODENAME=bionic
UBUNTU_CODENAME=bionic
root@1804:~# samba -V
Version 4.7.6-Ubuntu
root@1804:~# net ads lookup
Information for Domain Controller: 192.168.1.28
Response Type: LOGON_SAM_LOGON_RESPONSE_EX
GUID: afb28d02-8fbc-40b1-9f73-c6d23cce32bb
Flags:
Is a PDC: yes
Is a GC of the forest: yes
Is an LDAP server: yes
Supports DS: yes
Is running a KDC: yes
Is running time services: yes
Is the closest DC: yes
Is writable: yes
Has a hardware clock: yes
Is a non-domain NC serviced by LDAP server: no
Is NT6 DC that has some secrets: no
Is NT6 DC that has all secrets: yes
Runs Active Directory Web Services: yes
Runs on Windows 2012 or later: yes
Forest: test.jp
Domain: test.jp
Domain Controller: dc.test.jp
Pre-Win2k Domain: TEST
Pre-Win2k Hostname: DC
Server Site Name : Default-First-Site-Name
Client Site Name : Default-First-Site-Name
NT Version: 5
LMNT Token: ffff
LM20 Token: ffff
root@1804:~# dig test.jp
; <<>> DiG 9.11.3-1ubuntu1.13-Ubuntu <<>> test.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13787
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;test.jp. IN A
;; ANSWER SECTION:
test.jp. 600 IN A 192.168.1.30
test.jp. 600 IN A 192.168.1.27
test.jp. 600 IN A 192.168.1.28
test.jp. 600 IN A 192.168.1.53
;; Query time: 2 msec
;; SERVER: 192.168.1.27#53(192.168.1.27)
;; WHEN: Thu Sep 10 18:52:18 JST 2020
;; MSG SIZE rcvd: 100
root@1804:~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator@TEST.JP
Valid starting Expires Service principal
2020-09-10T18:43:27 2020-09-11T04:43:27 krbtgt/TEST.JP@TEST.JP
renew until 2020-09-11T18:43:22
root@1804:~# wbinfo -t
checking the trust secret for domain TEST via RPC calls succeeded
Ubuntu 18.04.5 LTS Samba4.7.6 Windows Server 2019 Datacenter Active Directory Domain のメンバーに参加してみた