[root@f31 ~]# kinit administrator Password for administrator@TEST.JP: [root@f31 ~]# net ads join -U administrator Enter administrator's password: Using short domain name -- TEST Joined 'F31' to dns domain 'test.jp' No DNS domain configured for f31. Unable to perform DNS Update. DNS update failed: NT_STATUS_INVALID_PARAMETER [root@f31 ~]# systemctl restart winbind [root@f31 ~]# wbinfo -u TEST\guest TEST\administrator TEST\krbtgt TEST\chibi [root@f31 ~]# wbinfo -n chibi S-1-5-21-531816203-730215079-1526157293-1103 SID_USER (1) [root@f31 ~]# net ads info LDAP server: 192.168.1.143 LDAP server name: dc2.test.jp Realm: TEST.JP Bind Path: dc=TEST,dc=JP LDAP port: 389 Server time: 水, 02 12月 2020 18:43:54 JST KDC server: 192.168.1.143 Server time offset: -6 Last machine account password change: 水, 02 12月 2020 18:43:28 JST [root@f31 ~]# host -4 dc dc.test.jp has address 192.168.1.34 dc.test.jp has address 192.168.1.24 dc.test.jp has IPv6 address 2400:4052:46e0:b700:78ff:d4cf:8f24:c7aa dc.test.jp has IPv6 address 2400:4052:46e0:b700:55c4:a495:cffa:fa8c [root@f31 ~]# host -4 dc1 dc1.test.jp has address 192.168.1.42 dc1.test.jp has IPv6 address 2400:4052:46e0:b700:8ca1:4fc6:8897:27c2 [root@f31 ~]# host -4 dc2 dc2.test.jp has address 192.168.1.143 dc2.test.jp has IPv6 address 2400:4052:46e0:b700:4187:ee03:b5e:34e1 [root@f31 ~]# host -t SRV _ldap._tcp.test.jp _ldap._tcp.test.jp has SRV record 0 100 389 dc2.test.jp. _ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp. _ldap._tcp.test.jp has SRV record 0 100 389 dc1.test.jp. [root@f31 ~]# host -t SRV _kerberos._udp.test.jp _kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp. _kerberos._udp.test.jp has SRV record 0 100 88 dc1.test.jp. _kerberos._udp.test.jp has SRV record 0 100 88 dc2.test.jp. [root@f31 ~]# host -t A test.jp test.jp has address 192.168.1.24 test.jp has address 192.168.1.42 test.jp has address 192.168.1.34 test.jp has address 192.168.1.143 [root@f31 ~]# cat /etc/redhat-release Fedora release 31 (Thirty One) [root@f31 ~]# samba -V Version 4.11.14 [root@f31 ~]# smbclient //192.168.1.24/netlogon -Uadministrator Enter TEST\administrator's password: Try "help" to get a list of possible commands. smb: \> ls . D 0 Sat Nov 28 06:54:46 2020 .. D 0 Sat Nov 28 06:54:46 2020 124869119 blocks of size 4096. 109942324 blocks available smb: \> exit [root@f31 ~]# smbclient //192.168.1.24/sysvol -Uadministrator Enter TEST\administrator's password: Try "help" to get a list of possible commands. smb: \> ls . D 0 Sat Nov 28 06:54:46 2020 .. D 0 Sat Nov 28 06:54:46 2020 test.jp D 0 Sat Nov 28 06:54:46 2020 124869119 blocks of size 4096. 109942316 blocks available smb: \> exit [root@f31 ~]# smbclient -L localhost -U% do_connect: Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED) [root@f31 ~]# smbclient -L 192.168.1.24 -U% Sharename Type Comment --------- ---- ------- SMB1 disabled -- no workgroup available [root@f31 ~]# net ads lookup Information for Domain Controller: 192.168.1.143 Response Type: LOGON_SAM_LOGON_RESPONSE_EX GUID: feabb66c-dd8b-489d-8e9a-8c72474ce583 Flags: Is a PDC: no Is a GC of the forest: yes Is an LDAP server: yes Supports DS: yes Is running a KDC: yes Is running time services: yes Is the closest DC: yes Is writable: yes Has a hardware clock: no Is a non-domain NC serviced by LDAP server: no Is NT6 DC that has some secrets: no Is NT6 DC that has all secrets: yes Runs Active Directory Web Services: yes Runs on Windows 2012 or later: yes Forest: test.jp Domain: test.jp Domain Controller: dc2.test.jp Pre-Win2k Domain: TEST Pre-Win2k Hostname: DC2 Server Site Name: Default-First-Site-Name Client Site Name: Default-First-Site-Name NT Version: 5 LMNT Token: ffff LM20 Token: ffff [root@f31 ~]# dig test.jp ; <<>> DiG 9.11.22-RedHat-9.11.22-1.fc31 <<>> test.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24705 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4000 ;; QUESTION SECTION: ;test.jp. IN A ;; ANSWER SECTION: test.jp. 600 IN A 192.168.1.143 test.jp. 600 IN A 192.168.1.34 test.jp. 600 IN A 192.168.1.42 test.jp. 600 IN A 192.168.1.24 ;; Query time: 0 msec ;; SERVER: 192.168.1.24#53(192.168.1.24) ;; WHEN: 水 12月 02 18:47:40 JST 2020 ;; MSG SIZE rcvd: 100 [root@f31 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator@TEST.JP Valid starting Expires Service principal 2020-12-02T18:43:05 2020-12-03T04:43:05 krbtgt/TEST.JP@TEST.JP renew until 2020-12-03T18:43:01 [root@f31 ~]# wbinfo -t checking the trust secret for domain TEST via RPC calls succeeded [root@f31 ~]# wbinfo -g TEST\domain computers TEST\cert publishers TEST\domain users TEST\domain guests TEST\ras and ias servers TEST\allowed rodc password replication group TEST\enterprise read-only domain controllers TEST\cloneable domain controllers TEST\protected users TEST\key admins TEST\enterprise key admins TEST\domain controllers TEST\read-only domain controllers TEST\denied rodc password replication group TEST\group policy creator owners TEST\enterprise admins TEST\domain admins TEST\schema admins TEST\dnsadmins TEST\dnsupdateproxy [root@f31 ~]#