{"id":23356,"date":"2024-12-23T04:42:55","date_gmt":"2024-12-22T19:42:55","guid":{"rendered":"https:\/\/wp.study3.biz\/?p=23356"},"modified":"2025-12-13T18:05:23","modified_gmt":"2025-12-13T09:05:23","slug":"ubuntu-22-04-5-lts-samba4-15-13-%e3%81%a7amd-epyc-77633-64-core-processor-128gb%e3%81%ab%e6%a7%8b%e7%af%89%e3%81%97%e3%81%9f-windows-server-2025-datacenter-active-directory-domain-%e3%81%ae%e3%83%a1","status":"publish","type":"post","link":"https:\/\/wp.study3.biz\/?p=23356","title":{"rendered":"Ubuntu 22.04.5 LTS Samba4.15.13 \u3067\u7b2c3\u4e16\u4ee3 AMD EPYC 7763 64-Core Processor 128GB\u306b\u69cb\u7bc9\u3057\u305f Windows Server 2025 Datacenter Active Directory Domain \u306e\u30e1\u30f3\u30d0\u30fc\u306b\u53c2\u52a0\u3057\u3066\u307f\u305f"},"content":{"rendered":"

\"\"\"\"<\/p>\n

root@2204:~# kinit administrator
\nPassword for administrator@TEST.JP:
\nWarning: Your password will expire in less than one hour on 2100\u5e7409\u670814\u65e5 11\u664248\u520605\u79d2
\nroot@2204:~# net ads join -U administrator
\nPassword for [TEST\\administrator]:
\nUsing short domain name — TEST
\nJoined ‘2204’ to dns domain ‘test.jp’
\nNo DNS domain configured for 2204. Unable to perform DNS Update.
\nDNS update failed: NT_STATUS_INVALID_PARAMETER
\nroot@2204:~# systemctl restart winbind
\nroot@2204:~# wbinfo -u
\nTEST\\administrator
\nTEST\\guest
\nTEST\\w11
\nTEST\\krbtgt
\nTEST\\chibi
\nroot@2204:~# wbinfo -n chibi
\nS-1-5-21-2588218054-2522920912-1718821798-1104 SID_USER (1)
\nroot@2204:~# net ads info
\nLDAP server: 192.168.1.48
\nLDAP server name: dc.test.jp
\nRealm: TEST.JP
\nBind Path: dc=TEST,dc=JP
\nLDAP port: 389
\nServer time: \u65e5, 22 12\u6708 2024 12:05:11 JST
\nKDC server: 192.168.1.48
\nServer time offset: 1
\nLast machine account password change: \u65e5, 22 12\u6708 2024 12:04:11 JST
\nroot@2204:~# host -t SRV _ldap._tcp.test.jp
\n_ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp.
\nroot@2204:~# host -t SRV _lerberos._udp.test.jp
\nHost _lerberos._udp.test.jp not found: 3(NXDOMAIN)
\nroot@2204:~# host -t SRV _kerberos._udp.test.jp
\n_kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp.
\nroot@2204:~# host -t A test.jp
\ntest.jp has address 192.168.1.48
\ntest.jp has address 192.168.1.49
\nroot@2204:~# cat \/etc\/os-release
\nPRETTY_NAME=”Ubuntu 22.04.5 LTS”
\nNAME=”Ubuntu”
\nVERSION_ID=”22.04″
\nVERSION=”22.04.5 LTS (Jammy Jellyfish)”
\nVERSION_CODENAME=jammy
\nID=ubuntu
\nID_LIKE=debian
\nHOME_URL=”https:\/\/www.ubuntu.com\/”
\nSUPPORT_URL=”https:\/\/help.ubuntu.com\/”
\nBUG_REPORT_URL=”https:\/\/bugs.launchpad.net\/ubuntu\/”
\nPRIVACY_POLICY_URL=”https:\/\/www.ubuntu.com\/legal\/terms-and-policies\/privacy-policy”
\nUBUNTU_CODENAME=jammy
\nroot@2204:~# samba -V
\nVersion 4.15.13-Ubuntu
\nroot@2204:~# smbclient \/\/192.168.1.48\/netlogon -Uadministrator
\nPassword for [TEST\\administrator]:
\nTry “help” to get a list of possible commands.
\nsmb: \\> ls
\n . D 0 Sat Dec 21 05:58:06 2024
\n .. D 0 Sat Dec 21 06:09:10 2024<\/p>\n

124813055 blocks of size 4096. 116163169 blocks available
\nsmb: \\> exit
\nroot@2204:~# smbclient \/\/192.168.1.48\/sysvol -Uadministrator
\nPassword for [TEST\\administrator]:
\nTry “help” to get a list of possible commands.
\nsmb: \\> ls
\n . D 0 Sat Dec 21 05:58:06 2024
\n .. D 0 Sat Dec 21 05:58:06 2024
\n test.jp Dr 0 Sat Dec 21 05:58:06 2024<\/p>\n

124813055 blocks of size 4096. 116163101 blocks available
\nsmb: \\> exit
\nroot@2204:~# net ads lookup
\nInformation for Domain Controller: 192.168.1.48<\/p>\n

Response Type: LOGON_SAM_LOGON_RESPONSE_EX
\nGUID: ff03c474-80bd-410b-a4c9-5f15a4958556
\nFlags:
\n Is a PDC: yes
\n Is a GC of the forest: yes
\n Is an LDAP server: yes
\n Supports DS: yes
\n Is running a KDC: yes
\n Is running time services: yes
\n Is the closest DC: yes
\n Is writable: yes
\n Has a hardware clock: yes
\n Is a non-domain NC serviced by LDAP server: no
\n Is NT6 DC that has some secrets: no
\n Is NT6 DC that has all secrets: yes
\n Runs Active Directory Web Services: yes
\n Runs on Windows 2012 or later: yes
\nForest: test.jp
\nDomain: test.jp
\nDomain Controller: dc.test.jp
\nPre-Win2k Domain: TEST
\nPre-Win2k Hostname: DC
\nServer Site Name: Default-First-Site-Name
\nClient Site Name: Default-First-Site-Name
\nNT Version: 5
\nLMNT Token: ffff
\nLM20 Token: ffff
\nroot@2204:~# dig test.jp<\/p>\n

; <<>> DiG 9.18.28-0ubuntu0.22.04.1-Ubuntu <<>> test.jp
\n;; global options: +cmd
\n;; Got answer:
\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31744\n;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 4000\n;; QUESTION SECTION:\n;test.jp. IN A\n\n;; ANSWER SECTION:\ntest.jp. 600 IN A 192.168.1.49\ntest.jp. 600 IN A 192.168.1.48\n\n;; Query time: 1 msec\n;; SERVER: 192.168.1.48#53(192.168.1.48) (UDP)\n;; WHEN: Sun Dec 22 12:10:06 JST 2024\n;; MSG SIZE rcvd: 68\n\nroot@2204:~# klist\nTicket cache: FILE:\/tmp\/krb5cc_0\nDefault principal: administrator@TEST.JP\n\nValid starting Expires Service principal\n2024-12-22T12:02:59 2024-12-22T22:02:59 krbtgt\/TEST.JP@TEST.JP\n renew until 2024-12-23T12:02:52\nroot@2204:~# wbinfo -t\nchecking the trust secret for domain TEST via RPC calls succeeded\nroot@2204:~# \n\u3057\u3087\u3046\u3055\u3044\u306f\u3053\u3061\u3089\u3067\u3059\u3002\nUbuntu 22.04.5 LTS Samba4.15.13 \u3067AMD EPYC 77633 64-Core Processor 128GB\u306b\u69cb\u7bc9\u3057\u305f Windows Server 2025 Datacenter Active Directory Domain \u306e\u30e1\u30f3\u30d0\u30fc\u306b\u53c2\u52a0\u3057\u3066\u307f\u305f<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

root@2204:~# kinit administrator Password for administrator@TEST.JP: Warning: Your password will expire in les … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[17,10],"tags":[],"class_list":["post-23356","post","type-post","status-publish","format-standard","hentry","category-ubuntu","category-windows"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/23356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=23356"}],"version-history":[{"count":6,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/23356\/revisions"}],"predecessor-version":[{"id":29092,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/23356\/revisions\/29092"}],"wp:attachment":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=23356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=23356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=23356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}