{"id":12828,"date":"2019-12-02T01:10:29","date_gmt":"2019-12-01T16:10:29","guid":{"rendered":"https:\/\/wp.study3.biz\/?p=12828"},"modified":"2022-08-26T04:40:48","modified_gmt":"2022-08-25T19:40:48","slug":"freebsd-13-0-current-r348210-samba4-8-12-active-directory-domain-controller%e3%81%ae%e6%a7%8b%e7%af%89%e3%81%a8%e5%8b%95%e4%bd%9c%e7%a2%ba%e8%aa%8d","status":"publish","type":"post","link":"https:\/\/wp.study3.biz\/?p=12828","title":{"rendered":"FreeBSD 13.0-CURRENT r348210 Samba4.8.12 Active Directory Domain Controller\u306e\u69cb\u7bc9\u3068\u52d5\u4f5c\u78ba\u8a8d"},"content":{"rendered":"

root@freebsd:~ # mount -o acls \/
\nroot@freebsd:~ # samba-tool domain provision
\nRealm: TEST.JP
\n Domain [TEST]:
\n Server Role (dc, member, standalone) [dc]:
\n DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]:
\n DNS forwarder IP address (write ‘none’ to disable forwarding) [192.168.1.8]:
\nAdministrator password:
\nRetype password:
\nLooking up IPv4 addresses
\nLooking up IPv6 addresses
\nNo IPv6 address will be assigned
\nSetting up share.ldb
\nSetting up secrets.ldb
\nSetting up the registry
\nSetting up the privileges database
\nSetting up idmap db
\nSetting up SAM db
\nSetting up sam.ldb partitions and settings
\nSetting up sam.ldb rootDSE
\nPre-loading the Samba 4 and AD schema
\nUnable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs
\nFreeBSD 13.0-CURRENT r348210 Samba4.8.12 Active Directory Domain Controller\u306e\u69cb\u7bc9<\/a>
\nroot@freebsd:~ # kinit administrator
\nadministrator@TEST.JP’s Password:
\nroot@freebsd:~ # samba-tool user add chibi
\nNote: samba-tool user add is deprecated. Please use samba-tool user create for the same function.
\nNew Password:
\nRetype Password:
\nUser ‘chibi’ created successfully
\nroot@freebsd:~ # wbinfo -u
\nTEST\\administrator
\nTEST\\guest
\nTEST\\krbtgt
\nTEST\\chibi
\nroot@freebsd:~ # wbinfo -n chibi
\nS-1-5-21-3683702346-2664945195-491150968-1103 SID_USER (1)
\nroot@freebsd:~ # net ads info
\nLDAP server: 192.168.1.8
\nLDAP server name: freebsd.test.jp
\nRealm: TEST.JP
\nBind Path: dc=TEST,dc=JP
\nLDAP port: 389
\nServer time: Sun, 02 Jun 2019 12:23:40 JST
\nKDC server: 192.168.1.8
\nServer time offset: 0
\nLast machine account password change: Sun, 02 Jun 2019 12:20:15 JST
\nroot@freebsd:~ # host -4 freebsd
\nfreebsd.test.jp has address 192.168.1.8
\nroot@freebsd:~ # host -t SRV _ldap._tcp.test.jp
\n_ldap._tcp.test.jp has SRV record 0 100 389 freebsd.test.jp.
\nroot@freebsd:~ # host -t SRV _kerberos._udp.test.jp
\n_kerberos._udp.test.jp has SRV record 0 100 88 freebsd.test.jp.
\nroot@freebsd:~ # host -t A freebsd.test.jp.
\nfreebsd.test.jp has address 192.168.1.8
\nroot@freebsd:~ # uname -a
\nFreeBSD freebsd 13.0-CURRENT FreeBSD 13.0-CURRENT r348210 GENERIC amd64
\nroot@freebsd:~ # samba -V
\nVersion 4.8.12
\nroot@freebsd:~ # smbclient -L localhost -U%
\nFreeBSD 13.0-CURRENT r348210 Samba4.8.12 Active Directory Domain Controller\u306e\u52d5\u4f5c\u78ba\u8a8d<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

root@freebsd:~ # mount -o acls \/ root@freebsd:~ # samba-tool domain provision Realm: TEST.JP Domain [TEST]: Se … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[8,9],"tags":[],"class_list":["post-12828","post","type-post","status-publish","format-standard","hentry","category-freebsd","category-samba4"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/12828","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12828"}],"version-history":[{"count":2,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/12828\/revisions"}],"predecessor-version":[{"id":12833,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/12828\/revisions\/12833"}],"wp:attachment":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12828"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12828"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12828"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}