{"id":860,"date":"2020-03-27T01:40:17","date_gmt":"2020-03-26T16:40:17","guid":{"rendered":"https:\/\/wp.study3.biz\/?p=860"},"modified":"2020-03-27T01:40:54","modified_gmt":"2020-03-26T16:40:54","slug":"fedora-release-30-samba4-10-13-acitive-directory-domein%e3%81%ae%e6%a7%8b%e7%af%89%e3%81%a8%e5%8b%95%e4%bd%9c%e7%a2%ba%e8%aa%8d","status":"publish","type":"post","link":"https:\/\/wp.study3.biz\/?p=860","title":{"rendered":"Fedora release 30 samba4.10.13 Acitive Directory Domein\u306e\u69cb\u7bc9\u3068\u52d5\u4f5c\u78ba\u8a8d"},"content":{"rendered":"<p>[root@f30 ~]# cat \/etc\/redhat-release<br \/>\nFedora release 30 (Thirty)<br \/>\n[root@f30 ~]# samba -V<br \/>\nVersion 4.10.13<br \/>\n[root@f30 ~]# samba-tool domain provision<br \/>\nRealm: TEST.JP<br \/>\nDomain [TEST]:<br \/>\nServer Role (dc, member, standalone) [dc]:<br \/>\nDNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]:<br \/>\nDNS forwarder IP address (write &#8216;none&#8217; to disable forwarding) [192.168.1.8]:<br \/>\nAdministrator password:<br \/>\nRetype password:<br \/>\nLooking up IPv4 addresses<br \/>\nLooking up IPv6 addresses<br \/>\nNo IPv6 address will be assigned<br \/>\nSetting up secrets.ldb<br \/>\nSetting up the registry<br \/>\nSetting up the privileges database<br \/>\nSetting up idmap db<br \/>\nSetting up SAM db<br \/>\nSetting up sam.ldb partitions and settings<br \/>\nSetting up sam.ldb rootDSE<br \/>\nPre-loading the Samba 4 and AD schema<br \/>\nUnable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs<\/p>\n<p>Adding DomainDN: DC=test,DC=jp<br \/>\nAdding configuration container<br \/>\nSetting up sam.ldb schema<\/p>\n<p>Setting up sam.ldb configuration data<br \/>\nSetting up display specifiers<br \/>\nModifying display specifiers and extended rights<br \/>\nAdding users container<br \/>\nModifying users container<br \/>\nAdding computers container<br \/>\nModifying computers container<br \/>\nSetting up sam.ldb data<br \/>\nSetting up well known security principals<br \/>\nSetting up sam.ldb users and groups<br \/>\nSetting up self join<br \/>\nAdding DNS accounts<br \/>\nCreating CN=MicrosoftDNS,CN=System,DC=test,DC=jp<br \/>\nCreating DomainDnsZones and ForestDnsZones partitions<br \/>\nPopulating DomainDnsZones and ForestDnsZones partitions<br \/>\nSetting up sam.ldb rootDSE marking as synchronized<br \/>\nFixing provision GUIDs<br \/>\nThe Kerberos KDC configuration for Samba AD is located at \/var\/lib\/samba\/private\/kdc.conf<br \/>\nA Kerberos configuration suitable for Samba AD has been generated at \/var\/lib\/samba\/private\/krb5.conf<br \/>\nMerge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!<br \/>\nOnce the above files are installed, your Samba AD server will be ready to use<br \/>\nServer Role: active directory domain controller<br \/>\nHostname: f30<br \/>\nNetBIOS Domain: TEST<br \/>\nDNS Domain: test.jp<br \/>\nDOMAIN SID: S-1-5-21-842234280-2978751291-3424404927<\/p>\n<p><a href=\"https:\/\/wp.study3.biz\/wp-content\/uploads\/2020\/03\/Fedora-release-30-samba4.10.13-Acitive-Directory-Domein\u306e\u69cb\u7bc9-\u3068\u8d77\u52d51.txt\">Fedora release 30 samba4.10.13 Acitive Directory Domein\u306e\u69cb\u7bc9 \u3068\u8d77\u52d51<\/a><\/p>\n<p>[root@f30 ~]# kinit administrator<br \/>\nPassword for administrator@TEST.JP:<br \/>\n[root@f30 ~]# samba-tool user list<br \/>\nGuest<br \/>\nAdministrator<br \/>\nkrbtgt<br \/>\n[root@f30 ~]# samba-tool user add chibi<br \/>\nNote: samba-tool user add is deprecated. Please use samba-tool user create for the same function.<br \/>\nNew Password:<br \/>\nRetype Password:<br \/>\nUser &#8216;chibi&#8217; created successfully<br \/>\n[root@f30 ~]# wbinfo -u<br \/>\nTEST\\administrator<br \/>\nTEST\\guest<br \/>\nTEST\\krbtgt<br \/>\nTEST\\chibi<br \/>\n[root@f30 ~]# wbinfo -n chibi<br \/>\nS-1-5-21-842234280-2978751291-3424404927-1103 SID_USER (1)<br \/>\n[root@f30 ~]# net ads info<br \/>\nLDAP server: 192.168.1.8<br \/>\nLDAP server name: f30.test.jp<br \/>\nRealm: TEST.JP<br \/>\nBind Path: dc=TEST,dc=JP<br \/>\nLDAP port: 389<br \/>\nServer time: \u6708, 02 3\u6708 2020 06:29:13 JST<br \/>\nKDC server: 192.168.1.8<br \/>\nServer time offset: 0<br \/>\nLast machine account password change: \u6708, 02 3\u6708 2020 06:23:37 JST<br \/>\n[root@f30 ~]# host -4 f30<br \/>\nf30.test.jp has address 192.168.1.8<br \/>\n[root@f30 ~]# host -t SRV _ldap._tcp.test.jp<br \/>\n_ldap._tcp.test.jp has SRV record 0 100 389 f30.test.jp.<br \/>\n[root@f30 ~]# host -t SRV _kerberos._udp.test.jp<br \/>\n_kerberos._udp.test.jp has SRV record 0 100 88 f30.test.jp.<br \/>\n[root@f30 ~]# host -t A f30.test.jp.<br \/>\nf30.test.jp has address 192.168.1.8<br \/>\n[root@f30 ~]# smbclient -L localhost -U%<\/p>\n<p>Sharename Type Comment<br \/>\n&#8212;&#8212;&#8212; &#8212;- &#8212;&#8212;-<br \/>\nsysvol Disk<br \/>\nnetlogon Disk<br \/>\nIPC$ IPC IPC Service (Samba 4.10.13)<br \/>\nReconnecting with SMB1 for workgroup listing.<\/p>\n<p>Server Comment<br \/>\n&#8212;&#8212;&#8212; &#8212;&#8212;-<\/p>\n<p>Workgroup Master<br \/>\n&#8212;&#8212;&#8212; &#8212;&#8212;-<br \/>\n[root@f30 ~]# cat \/etc\/redhat-release<\/p>\n<p><a href=\"https:\/\/wp.study3.biz\/wp-content\/uploads\/2020\/03\/Fedora-release-30-samba4.10.13-Acitive-Directory-Domein\u306e\u52d5\u4f5c\u78ba\u8a8d1.txt\">Fedora release 30 samba4.10.13 Acitive Directory Domein\u306e\u52d5\u4f5c\u78ba\u8a8d1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[root@f30 ~]# cat \/etc\/redhat-release Fedora release 30 (Thirty) [root@f30 ~]# samba -V Version 4.10.13 [root@ &hellip; <a href=\"https:\/\/wp.study3.biz\/?p=860\">\u7d9a\u304d\u3092\u8aad\u3080 <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2,9],"tags":[],"class_list":["post-860","post","type-post","status-publish","format-standard","hentry","category-fedora","category-samba4"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/860","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=860"}],"version-history":[{"count":2,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/860\/revisions"}],"predecessor-version":[{"id":866,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/860\/revisions\/866"}],"wp:attachment":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=860"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=860"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=860"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}