Fedora27 Samba4.7.10 Windows Server 2019 Datacenter Active Directory Domain のメンバーに参加してみた

投稿日: 2020年1月4日 作成者: chibi


[root@f27 ~]# kinit administrator
kinit: Cannot find KDC for realm “TEST.JP” while getting initial credentials
[root@f27 ~]# nano /etc/resolv.conf
[root@f27 ~]# kinit administrator
Password for administrator@TEST.JP:
[root@f27 ~]# net ads join -U administrator
Enter administrator’s password:
Using short domain name — TEST
Joined ‘F27’ to dns domain ‘test.jp’
No DNS domain configured for f27. Unable to perform DNS Update.
DNS update failed: NT_STATUS_INVALID_PARAMETER
[root@f27 ~]# systemctl restart winbind
[root@f27 ~]# wbinfo -u
TEST\guest
TEST\administrator
TEST\krbtgt
TEST\chibi
[root@f27 ~]# wbinfo -n administrator
S-1-5-21-4283025733-908519724-3295402948-500 SID_USER (1)
[root@f27 ~]# net ads info
LDAP server: 192.168.1.61
LDAP server name: dc2.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 土, 06 7月 2019 06:20:33 JST
KDC server: 192.168.1.61
Server time offset: -6
Last machine account password change: 土, 06 7月 2019 06:19:25 JST
[root@f27 ~]# host -4 dc
dc.test.jp has address 192.168.1.58
dc.test.jp has address 192.168.1.10
dc.test.jp has IPv6 address 2400:4052:46e0:b700:b03b:d3b7:8519:54be
dc.test.jp has IPv6 address 2400:4052:46e0:b700:cc6c:3df7:45e4:e985
[root@f27 ~]# host -4 dc
dc.test.jp has address 192.168.1.58
dc.test.jp has address 192.168.1.10
dc.test.jp has IPv6 address 2400:4052:46e0:b700:b03b:d3b7:8519:54be
dc.test.jp has IPv6 address 2400:4052:46e0:b700:cc6c:3df7:45e4:e985
[root@f27 ~]# host -4 dc2
dc2.test.jp has address 192.168.1.61
dc2.test.jp has IPv6 address 2400:4052:46e0:b700:f0b7:1338:1a03:19fd
[root@f27 ~]# host -4 dc1
dc1.test.jp has address 192.168.1.60
dc1.test.jp has IPv6 address 2400:4052:46e0:b700:9d2:83b4:4031:14cf
[root@f27 ~]# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 dc2.test.jp.
_ldap._tcp.test.jp has SRV record 0 100 389 dc1.test.jp.
_ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp.
[root@f27 ~]# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 dc2.test.jp.
_kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp.
_kerberos._udp.test.jp has SRV record 0 100 88 dc1.test.jp.
[root@f27 ~]# host -t A test.jp
;; connection timed out; no servers could be reached
[root@f27 ~]# host -t A test.jp
test.jp has address 13.113.45.174
[root@f27 ~]# host -t A dc.test.jp
dc.test.jp has address 192.168.1.10
dc.test.jp has address 192.168.1.58
[root@f27 ~]# host -t A dc1.test.jp
dc1.test.jp has address 192.168.1.60
[root@f27 ~]# host -t A dc2.test.jp
dc2.test.jp has address 192.168.1.61
[root@f27 ~]# smbclient //192.168.1.10/netlogon -Uadministrator
Fedora27 Samba4.7.10 Windows Server 2019 Datacenter Active Directory Domain のメンバーに参加してみた

カテゴリー: fedora, samba4, windows | コメントする

OpenSUSE Kernel5.1.15-1-default Update

投稿日: 2020年1月4日 作成者: chibi

OpenSUSE Kernelが5.1.15-1-defaultにUpdateされました。

opensuse:~ # uname -r
5.1.15-1-default
opensuse:~ # php -v
PHP 7.3.6 (cli) ( NTS )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.3.6, Copyright (c) 1998-2018 Zend Technologies
opensuse:~ # curl -V
curl 7.65.1 (x86_64-suse-linux-gnu) libcurl/7.65.1 OpenSSL/1.1.1c zlib/1.2.11 libidn2/2.2.0 libpsl/0.21.0 (+libidn2/2.2.0) libssh/0.8.7/openssl/zlib nghttp2/1.38.0
Release-Date: 2019-06-05
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: AsynchDNS GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz Metalink NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets
opensuse:~ # samba -V
Version 4.10.5-git.105.2bd98587873SUSE-oS15.5-x86_64
opensuse:~ # cat /etc/os-release
NAME=”openSUSE Tumbleweed”
#VERSION=”20190703″
ID=”opensuse-tumbleweed”
ID_LIKE=”opensuse suse”
VERSION_ID=”20190703″
PRETTY_NAME=”openSUSE Tumbleweed”
ANSI_COLOR=”0;32″
CPE_NAME=”cpe:/o:opensuse:tumbleweed:20190703″
BUG_REPORT_URL=”https://bugs.opensuse.org”
HOME_URL=”https://www.opensuse.org/”
LOGO=”distributor-logo”
opensuse:~ #

カテゴリー: opensuse | コメントする

Fedora31 PHP 7.3.7 Update

投稿日: 2020年1月4日 作成者: chibi

Fedora31 PHPが7.3.7にUpdateされました。

[root@f31 ~]# uname -r
5.2.0-0.rc7.git0.1.fc31.x86_64
[root@f31 ~]# php -v
PHP 7.3.7 (cli) (built: Jul 2 2019 10:53:48) ( NTS )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.3.7, Copyright (c) 1998-2018 Zend Technologies
[root@f31 ~]# curl -V
curl 7.65.1 (x86_64-redhat-linux-gnu) libcurl/7.65.1 OpenSSL/1.1.1c-fips zlib/1.2.11 brotli/1.0.7 libidn2/2.2.0 libpsl/0.21.0 (+libidn2/2.1.1) libssh/0.9.0/openssl/zlib nghttp2/1.39.1
Release-Date: 2019-06-05
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: AsynchDNS brotli GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz Metalink NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets
[root@f31 ~]# samba -V
Version 4.10.5
[root@f31 ~]# cat /etc/redhat-release
Fedora release 31 (Rawhide)
[root@f31 ~]#

カテゴリー: fedora | コメントする

CentOS7.6 ソースからビルドしたSamba4.9.11の構築と起動及び動作確認

投稿日: 2020年1月3日 作成者: chibi

[root@centos7 ~]# /usr/local/samba/bin/samba-tool domain provision
Realm: TEST.JP
Domain [TEST]:
Server Role (dc, member, standalone) [dc]:
DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]:
DNS forwarder IP address (write ‘none’ to disable forwarding) [192.168.1.8]:
Administrator password:
Retype password:
Looking up IPv4 addresses
Looking up IPv6 addresses
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs
CentOS7.6 ソースからビルドしたSamba4.9.11の構築と起動
[root@centos7 ~]# kinit administrator
Password for administrator@TEST.JP:
Warning: Your password will expire in 41 days on 2019年08月15日 07時54分21秒
[root@centos7 ~]# net ads info
LDAP server: 192.168.1.8
LDAP server name: centos7.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 木, 04 7月 2019 07:56:59 JST
KDC server: 192.168.1.8
Server time offset: 0
Last machine account password change: 木, 04 7月 2019 05:55:12 JST
[root@centos7 ~]# host -4 centos7.test.jp
centos7.test.jp has address 192.168.1.8
centos7.test.jp has IPv6 address 2400:4052:46e0:b700:a114:b4b3:f7d8:3725
[root@centos7 ~]# /usr/local/samba/bin/samba-tool user add chibi
Note: samba-tool user add is deprecated. Please use samba-tool user create for the same function.
New Password:
Retype Password:
User ‘chibi’ created successfully
[root@centos7 ~]# wbinfo -u
could not obtain winbind interface details: WBC_ERR_WINBIND_NOT_AVAILABLE
could not obtain winbind domain name!
Error looking up domain users
[root@centos7 ~]# /usr/local/samba/bin/samba-tool user list
chibi
Administrator
krbtgt
Guest
[root@centos7 ~]# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 centos7.test.jp.
[root@centos7 ~]# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 centos7.test.jp.
[root@centos7 ~]# host -t A centos7.test.jp.
centos7.test.jp has address 192.168.1.8
[root@centos7 ~]# /usr/local/samba/bin/smbclient -L localhost -U%
CentOS7.6 ソースからビルドしたSamba4.9.11の動作確認

カテゴリー: centos7, samba4 | コメントする

CentOS7.6 Samba4.8.3 Samba4.105 Windows Server 2019 Datacenter Active Directory Domainのメンバーに参加してみた

投稿日: 2020年1月3日 作成者: chibi


[root@centos7 ~]# kinit administrator
Password for administrator@TEST.JP:
kinit: Clock skew too great while getting initial credentials
[root@centos7 ~]# date
2019年 7月 4日 木曜日 05:54:26 JST
[root@centos7 ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator@TEST.JP

Valid starting Expires Service principal
2019-07-03T11:20:54 2019-07-03T21:20:54 krbtgt/TEST.JP@TEST.JP
renew until 2019-07-04T11:20:50
[root@centos7 ~]# net ads join -U administrator
Enter administrator’s password:
Using short domain name — TEST
Joined ‘CENTOS7’ to dns domain ‘test.jp’
No DNS domain configured for centos7. Unable to perform DNS Update.
DNS update failed: NT_STATUS_INVALID_PARAMETER
[root@centos7 ~]# systemctl restart winbind
[root@centos7 ~]# wbinfo -u
TEST\guest
TEST\administrator
TEST\krbtgt
TEST\chibi
[root@centos7 ~]# wbinfo -n administrator
S-1-5-21-4283025733-908519724-3295402948-500 SID_USER (1)
[root@centos7 ~]# net ads info
LDAP server: 192.168.1.61
LDAP server name: dc2.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 木, 04 7月 2019 05:55:50 JST
KDC server: 192.168.1.61
Server time offset: -5
Last machine account password change: 木, 04 7月 2019 05:55:12 JST
[root@centos7 ~]# host -4 dc
dc.test.jp has address 192.168.1.58
dc.test.jp has address 192.168.1.10
dc.test.jp has IPv6 address 2400:4052:46e0:b700:cc6c:3df7:45e4:e985
dc.test.jp has IPv6 address 2400:4052:46e0:b700:b03b:d3b7:8519:54be
[root@centos7 ~]# host -4 dc1
dc1.test.jp has address 192.168.1.60
dc1.test.jp has IPv6 address 2400:4052:46e0:b700:9d2:83b4:4031:14cf
[root@centos7 ~]# host -4 dc
dc.test.jp has address 192.168.1.58
dc.test.jp has address 192.168.1.10
dc.test.jp has IPv6 address 2400:4052:46e0:b700:b03b:d3b7:8519:54be
dc.test.jp has IPv6 address 2400:4052:46e0:b700:cc6c:3df7:45e4:e985
[root@centos7 ~]# host -4 dc2
dc2.test.jp has address 192.168.1.61
dc2.test.jp has IPv6 address 2400:4052:46e0:b700:f0b7:1338:1a03:19fd
[root@centos7 ~]# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 dc2.test.jp.
_ldap._tcp.test.jp has SRV record 0 100 389 dc1.test.jp.
_ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp.
[root@centos7 ~]# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 dc1.test.jp.
_kerberos._udp.test.jp has SRV record 0 100 88 dc2.test.jp.
_kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp.
[root@centos7 ~]# host -t A test.jp
test.jp has address 192.168.1.10
test.jp has address 192.168.1.60
test.jp has address 192.168.1.58
test.jp has address 192.168.1.61
[root@centos7 ~]# smbclient //192.168.1.10/netlogon -Uadministrator
CentOS7.6 Samba4.8.3 Samba4.105 Windows Server 2019 Datacenter Active Directory Domainのメンバーに参加してみた

カテゴリー: centos7, samba4, windows | コメントする