{"id":12199,"date":"2020-01-03T03:14:24","date_gmt":"2020-01-02T18:14:24","guid":{"rendered":"https:\/\/wp.study3.biz\/?p=12199"},"modified":"2022-08-10T10:26:14","modified_gmt":"2022-08-10T01:26:14","slug":"centos7-6-samba4-8-3-samba4-105-windows-server-2019-datacenter-active-directory-domain%e3%81%ae%e3%83%a1%e3%83%b3%e3%83%90%e3%83%bc%e3%81%ab%e5%8f%82%e5%8a%a0%e3%81%97%e3%81%a6%e3%81%bf%e3%81%9f","status":"publish","type":"post","link":"https:\/\/wp.study3.biz\/?p=12199","title":{"rendered":"CentOS7.6 Samba4.8.3 Samba4.105 Windows Server 2019 Datacenter Active Directory Domain\u306e\u30e1\u30f3\u30d0\u30fc\u306b\u53c2\u52a0\u3057\u3066\u307f\u305f"},"content":{"rendered":"

\"\"
\n[root@centos7 ~]# kinit administrator
\nPassword for administrator@TEST.JP:
\nkinit: Clock skew too great while getting initial credentials
\n[root@centos7 ~]# date
\n2019\u5e74 7\u6708 4\u65e5 \u6728\u66dc\u65e5 05:54:26 JST
\n[root@centos7 ~]# klist
\nTicket cache: FILE:\/tmp\/krb5cc_0
\nDefault principal: administrator@TEST.JP<\/p>\n

Valid starting Expires Service principal
\n2019-07-03T11:20:54 2019-07-03T21:20:54 krbtgt\/TEST.JP@TEST.JP
\n renew until 2019-07-04T11:20:50
\n[root@centos7 ~]# net ads join -U administrator
\nEnter administrator’s password:
\nUsing short domain name — TEST
\nJoined ‘CENTOS7’ to dns domain ‘test.jp’
\nNo DNS domain configured for centos7. Unable to perform DNS Update.
\nDNS update failed: NT_STATUS_INVALID_PARAMETER
\n[root@centos7 ~]# systemctl restart winbind
\n[root@centos7 ~]# wbinfo -u
\nTEST\\guest
\nTEST\\administrator
\nTEST\\krbtgt
\nTEST\\chibi
\n[root@centos7 ~]# wbinfo -n administrator
\nS-1-5-21-4283025733-908519724-3295402948-500 SID_USER (1)
\n[root@centos7 ~]# net ads info
\nLDAP server: 192.168.1.61
\nLDAP server name: dc2.test.jp
\nRealm: TEST.JP
\nBind Path: dc=TEST,dc=JP
\nLDAP port: 389
\nServer time: \u6728, 04 7\u6708 2019 05:55:50 JST
\nKDC server: 192.168.1.61
\nServer time offset: -5
\nLast machine account password change: \u6728, 04 7\u6708 2019 05:55:12 JST
\n[root@centos7 ~]# host -4 dc
\ndc.test.jp has address 192.168.1.58
\ndc.test.jp has address 192.168.1.10
\ndc.test.jp has IPv6 address 2400:4052:46e0:b700:cc6c:3df7:45e4:e985
\ndc.test.jp has IPv6 address 2400:4052:46e0:b700:b03b:d3b7:8519:54be
\n[root@centos7 ~]# host -4 dc1
\ndc1.test.jp has address 192.168.1.60
\ndc1.test.jp has IPv6 address 2400:4052:46e0:b700:9d2:83b4:4031:14cf
\n[root@centos7 ~]# host -4 dc
\ndc.test.jp has address 192.168.1.58
\ndc.test.jp has address 192.168.1.10
\ndc.test.jp has IPv6 address 2400:4052:46e0:b700:b03b:d3b7:8519:54be
\ndc.test.jp has IPv6 address 2400:4052:46e0:b700:cc6c:3df7:45e4:e985
\n[root@centos7 ~]# host -4 dc2
\ndc2.test.jp has address 192.168.1.61
\ndc2.test.jp has IPv6 address 2400:4052:46e0:b700:f0b7:1338:1a03:19fd
\n[root@centos7 ~]# host -t SRV _ldap._tcp.test.jp
\n_ldap._tcp.test.jp has SRV record 0 100 389 dc2.test.jp.
\n_ldap._tcp.test.jp has SRV record 0 100 389 dc1.test.jp.
\n_ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp.
\n[root@centos7 ~]# host -t SRV _kerberos._udp.test.jp
\n_kerberos._udp.test.jp has SRV record 0 100 88 dc1.test.jp.
\n_kerberos._udp.test.jp has SRV record 0 100 88 dc2.test.jp.
\n_kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp.
\n[root@centos7 ~]# host -t A test.jp
\ntest.jp has address 192.168.1.10
\ntest.jp has address 192.168.1.60
\ntest.jp has address 192.168.1.58
\ntest.jp has address 192.168.1.61
\n[root@centos7 ~]# smbclient \/\/192.168.1.10\/netlogon -Uadministrator
\nCentOS7.6 Samba4.8.3 Samba4.105 Windows Server 2019 Datacenter Active Directory Domain\u306e\u30e1\u30f3\u30d0\u30fc\u306b\u53c2\u52a0\u3057\u3066\u307f\u305f<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

[root@centos7 ~]# kinit administrator Password for administrator@TEST.JP: kinit: Clock skew too great while ge … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[19,9,10],"tags":[],"class_list":["post-12199","post","type-post","status-publish","format-standard","hentry","category-centos7","category-samba4","category-windows"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/12199","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12199"}],"version-history":[{"count":2,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/12199\/revisions"}],"predecessor-version":[{"id":12203,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/12199\/revisions\/12203"}],"wp:attachment":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12199"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12199"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}