{"id":886,"date":"2020-03-29T01:54:09","date_gmt":"2020-03-28T16:54:09","guid":{"rendered":"https:\/\/wp.study3.biz\/?p=886"},"modified":"2020-03-29T01:54:42","modified_gmt":"2020-03-28T16:54:42","slug":"fedora-release-32-samba4-12-0-acitive-directory-domein%e3%81%ae%e6%a7%8b%e7%af%89%e3%81%a8%e5%8b%95%e4%bd%9c%e7%a2%ba%e8%aa%8d","status":"publish","type":"post","link":"https:\/\/wp.study3.biz\/?p=886","title":{"rendered":"Fedora release 32 samba4.12.0 Acitive Directory Domein\u306e\u69cb\u7bc9\u3068\u52d5\u4f5c\u78ba\u8a8d"},"content":{"rendered":"<p>[root@f32 ~]# cat \/etc\/redhat-release<br \/>\nFedora release 32 (Thirty Two)<br \/>\n[root@f32 ~]# samba -V<br \/>\nVersion 4.12.0<br \/>\n[root@f32 ~]# samba-tool domain provision<br \/>\nRealm: TEST.JP<br \/>\nDomain [TEST]:<br \/>\nServer Role (dc, member, standalone) [dc]:<br \/>\nDNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]:<br \/>\nDNS forwarder IP address (write &#8216;none&#8217; to disable forwarding) [192.168.1.2]:<br \/>\nAdministrator password:<br \/>\nRetype password:<br \/>\nLooking up IPv4 addresses<br \/>\nLooking up IPv6 addresses<br \/>\nSetting up share.ldb<br \/>\nSetting up secrets.ldb<br \/>\nSetting up the registry<br \/>\nSetting up the privileges database<br \/>\nSetting up idmap db<br \/>\nSetting up SAM db<br \/>\nSetting up sam.ldb partitions and settings<br \/>\nSetting up sam.ldb rootDSE<br \/>\nPre-loading the Samba 4 and AD schema<br \/>\nUnable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs<\/p>\n<p>Adding DomainDN: DC=test,DC=jp<br \/>\nAdding configuration container<br \/>\nSetting up sam.ldb schema<br \/>\nSetting up sam.ldb configuration data<br \/>\nSetting up display specifiers<br \/>\nModifying display specifiers and extended rights<br \/>\nAdding users container<br \/>\nModifying users container<br \/>\nAdding computers container<br \/>\nModifying computers container<br \/>\nSetting up sam.ldb data<br \/>\nSetting up well known security principals<br \/>\nSetting up sam.ldb users and groups<br \/>\nSetting up self join<br \/>\nRepacking database from v1 to v2 format (first record CN=IpHost,CN=Schema,CN=Configuration,DC=test,DC=jp)<br \/>\nRepack: re-packed 10000 records so far<br \/>\nRepacking database from v1 to v2 format (first record CN=DS-UI-Default-Settings,CN=419,CN=DisplaySpecifiers,CN=Configuration,DC=test,DC=jp)<br \/>\nRepacking database from v1 to v2 format (first record CN=Performance Monitor Users,CN=Builtin,DC=test,DC=jp)<br \/>\nAdding DNS accounts<br \/>\nCreating CN=MicrosoftDNS,CN=System,DC=test,DC=jp<br \/>\nCreating DomainDnsZones and ForestDnsZones partitions<br \/>\nPopulating DomainDnsZones and ForestDnsZones partitions<br \/>\nRepacking database from v1 to v2 format (first record CN=MicrosoftDNS,DC=DomainDnsZones,DC=test,DC=jp)<br \/>\nRepacking database from v1 to v2 format (first record DC=gc,DC=_msdcs.test.jp,CN=MicrosoftDNS,DC=ForestDnsZones,DC=test,DC=jp)<br \/>\nSetting up sam.ldb rootDSE marking as synchronized<br \/>\nFixing provision GUIDs<br \/>\nThe Kerberos KDC configuration for Samba AD is located at \/var\/lib\/samba\/private\/kdc.conf<br \/>\nA Kerberos configuration suitable for Samba AD has been generated at \/var\/lib\/samba\/private\/krb5.conf<br \/>\nMerge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!<br \/>\nOnce the above files are installed, your Samba AD server will be ready to use<br \/>\nServer Role: active directory domain controller<br \/>\nHostname: f32<br \/>\nNetBIOS Domain: TEST<br \/>\nDNS Domain: test.jp<br \/>\nDOMAIN SID: S-1-5-21-327220636-2223179890-4129240002<\/p>\n<p><a href=\"https:\/\/wp.study3.biz\/wp-content\/uploads\/2020\/03\/Fedora-release-32-samba4.12.0-Acitive-Directory-Domein\u306e\u69cb\u7bc9-\u3068\u8d77\u52d50.txt\">Fedora release 32 samba4.12.0 Acitive Directory Domein\u306e\u69cb\u7bc9 \u3068\u8d77\u52d50<\/a><\/p>\n<p>[root@f32 ~]# kinit administrator<br \/>\nPassword for administrator@TEST.JP:<br \/>\n[root@f32 ~]# net ads info<br \/>\nLDAP server: 192.168.1.2<br \/>\nLDAP server name: f32.test.jp<br \/>\nRealm: TEST.JP<br \/>\nBind Path: dc=TEST,dc=JP<br \/>\nLDAP port: 389<br \/>\nServer time: \u6c34, 04 3\u6708 2020 13:34:50 JST<br \/>\nKDC server: 192.168.1.2<br \/>\nServer time offset: 0<br \/>\nLast machine account password change: \u6c34, 04 3\u6708 2020 13:30:43 JST<br \/>\n[root@f32 ~]# samba-tool user add chibi<br \/>\nNote: samba-tool user add is deprecated. Please use samba-tool user create for the same function.<br \/>\nNew Password:<br \/>\nRetype Password:<br \/>\nUser &#8216;chibi&#8217; created successfully<br \/>\n[root@f32 ~]# wbinfo -u<br \/>\nTEST\\administrator<br \/>\nTEST\\guest<br \/>\nTEST\\krbtgt<br \/>\nTEST\\chibi<br \/>\n[root@f32 ~]# wbinfo -n chibi<br \/>\nS-1-5-21-327220636-2223179890-4129240002-1103 SID_USER (1)<br \/>\n[root@f32 ~]# host -4 f32<br \/>\nf32.test.jp has address 192.168.1.2<br \/>\nf32.test.jp has IPv6 address 2400:4052:46e0:b700:f10b:b47f:c900:66a3<br \/>\n[root@f32 ~]# host -t SRV _ldap._tcp.test.jp<br \/>\n_ldap._tcp.test.jp has SRV record 0 100 389 f32.test.jp.<br \/>\n[root@f32 ~]# host -t SRV _kerberos._udp.test.jp<br \/>\n_kerberos._udp.test.jp has SRV record 0 100 88 f32.test.jp.<br \/>\n[root@f32 ~]# host -t A f32.test.jp.<br \/>\nf32.test.jp has address 192.168.1.2<br \/>\n[root@f32 ~]# cat \/etc\/redhat-release<br \/>\nFedora release 32 (Thirty Two)<br \/>\n[root@f32 ~]# samba -V<br \/>\nVersion 4.12.0<br \/>\n[root@f32 ~]# smbclient -L localhost -U%<\/p>\n<p>Sharename Type Comment<br \/>\n&#8212;&#8212;&#8212; &#8212;- &#8212;&#8212;-<br \/>\nsysvol Disk<br \/>\nnetlogon Disk<br \/>\nIPC$ IPC IPC Service (Samba 4.12.0)<br \/>\nSMB1 disabled &#8212; no workgroup available<br \/>\n[root@f32 ~]# smbclient \/\/localhost\/netlogon -Uadministrator<\/p>\n<p><a href=\"https:\/\/wp.study3.biz\/wp-content\/uploads\/2020\/03\/Fedora-release-32-samba4.12.0-Acitive-Directory-Domein\u306e\u52d5\u4f5c\u78ba\u8a8d.txt\">Fedora release 32 samba4.12.0 Acitive Directory Domein\u306e\u52d5\u4f5c\u78ba\u8a8d<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[root@f32 ~]# cat \/etc\/redhat-release Fedora release 32 (Thirty Two) [root@f32 ~]# samba -V Version 4.12.0 [ro &hellip; <a href=\"https:\/\/wp.study3.biz\/?p=886\">\u7d9a\u304d\u3092\u8aad\u3080 <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2,9],"tags":[],"class_list":["post-886","post","type-post","status-publish","format-standard","hentry","category-fedora","category-samba4"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=886"}],"version-history":[{"count":2,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/886\/revisions"}],"predecessor-version":[{"id":892,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=\/wp\/v2\/posts\/886\/revisions\/892"}],"wp:attachment":[{"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=886"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=886"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.study3.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}