[root@f32 ~]# samba-tool domain provision
Realm: TEST.JP
Domain [TEST]:
Server Role (dc, member, standalone) [dc]:
DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]:
DNS forwarder IP address (write ‘none’ to disable forwarding) [192.168.1.2]:
Administrator password:
Retype password:
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up share.ldb
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs
Adding DomainDN: DC=test,DC=jp
Adding configuration container
Setting up sam.ldb schema
Setting up sam.ldb configuration data
Setting up display specifiers
Modifying display specifiers and extended rights
Adding users container
Modifying users container
Adding computers container
Modifying computers container
Setting up sam.ldb data
Setting up well known security principals
Setting up sam.ldb users and groups
Setting up self join
Repacking database from v1 to v2 format (first record CN=ms-DS-Az-Application,CN=Schema,CN=Configuration,DC=test,DC=jp)
Repack: re-packed 10000 records so far
Repacking database from v1 to v2 format (first record CN=mSMQSiteLink-Display,CN=414,CN=DisplaySpecifiers,CN=Configuration,DC=test,DC=jp)
Repacking database from v1 to v2 format (first record CN=Infrastructure,DC=test,DC=jp)
Adding DNS accounts
Creating CN=MicrosoftDNS,CN=System,DC=test,DC=jp
Creating DomainDnsZones and ForestDnsZones partitions
Populating DomainDnsZones and ForestDnsZones partitions
Repacking database from v1 to v2 format (first record DC=DomainDnsZones,DC=test,DC=jp)
Repacking database from v1 to v2 format (first record DC=_ldap._tcp.dc,DC=_msdcs.test.jp,CN=MicrosoftDNS,DC=ForestDnsZones,DC=test,DC=jp)
Setting up sam.ldb rootDSE marking as synchronized
Fixing provision GUIDs
The Kerberos KDC configuration for Samba AD is located at /var/lib/samba/private/kdc.conf
A Kerberos configuration suitable for Samba AD has been generated at /var/lib/samba/private/krb5.conf
Merge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!
Once the above files are installed, your Samba AD server will be ready to use
Server Role: active directory domain controller
Hostname: f32
NetBIOS Domain: TEST
DNS Domain: test.jp
DOMAIN SID: S-1-5-21-3826381857-2800277158-3877578712
Fedora release 32 samba4.12.0rc3 Acitive Directory Domeinの構築 と起動 0
[root@f32 ~]# kinit administrator
Password for administrator@TEST.JP:
[root@f32 ~]# net ads info
LDAP server: 192.168.1.2
LDAP server name: f32.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 金, 21 2月 2020 14:01:41 EST
KDC server: 192.168.1.2
Server time offset: 0
Last machine account password change: 金, 21 2月 2020 13:58:06 EST
[root@f32 ~]# wbinfo -u
TEST\administrator
TEST\guest
TEST\krbtgt
[root@f32 ~]# samba-tool user add chibi
Note: samba-tool user add is deprecated. Please use samba-tool user create for the same function.
New Password:
Retype Password:
User ‘chibi’ created successfully
[root@f32 ~]# host -4 f32
f32.test.jp has address 192.168.1.2
[root@f32 ~]# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 f32.test.jp.
[root@f32 ~]# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 f32.test.jp.
[root@f32 ~]# host -t A f32.test.jp.
f32.test.jp has address 192.168.1.2
[root@f32 ~]# smbclient -L localhost -U%
Sharename Type Comment
——— —- ——-
sysvol Disk
netlogon Disk
IPC$ IPC IPC Service (Samba 4.12.0rc3)
SMB1 disabled — no workgroup available
[root@f32 ~]# smbclient //localhost/netlogon -Uadministrator
Fedora release 32 samba4.12.0rc3 Acitive Directory Domeinの動作確認