[man ~]# kinit administrator Password for administrator@TEST.JP: [man ~]# net ads join -U administrator Enter administrator's password: Using short domain name -- TEST Joined 'MAN' to dns domain 'test.jp' No DNS domain configured for man. Unable to perform DNS Update. DNS update failed: NT_STATUS_INVALID_PARAMETER [man ~]# systemctl enable winbind Created symlink /etc/systemd/system/multi-user.target.wants/winbind.service → /usr/lib/systemd/system/winbind.service. [man ~]# systemctl restart winbind [man ~]# wbinfo -u TEST\guest TEST\administrator TEST\krbtgt TEST\chibi [man ~]# wbinfo -n administrator S-1-5-21-531816203-730215079-1526157293-500 SID_USER (1) [man ~]# net ads info LDAP server: 192.168.1.143 LDAP server name: dc2.test.jp Realm: TEST.JP Bind Path: dc=TEST,dc=JP LDAP port: 389 Server time: 土, 05 12月 2020 13:01:34 JST KDC server: 192.168.1.143 Server time offset: -6 Last machine account password change: 土, 05 12月 2020 13:00:49 JST [man ~]# host -4 dc dc.test.jp has address 192.168.1.34 dc.test.jp has address 192.168.1.24 dc.test.jp has IPv6 address 2400:4052:46e0:b700:78ff:d4cf:8f24:c7aa dc.test.jp has IPv6 address 2400:4052:46e0:b700:55c4:a495:cffa:fa8c [man ~]# host -4 dc1 dc1.test.jp has address 192.168.1.42 dc1.test.jp has IPv6 address 2400:4052:46e0:b700:8ca1:4fc6:8897:27c2 [man ~]# host -4 dc2 dc2.test.jp has address 192.168.1.143 dc2.test.jp has IPv6 address 2400:4052:46e0:b700:4187:ee03:b5e:34e1 [man ~]# host -t SRV _ldap._tcp.test.jp _ldap._tcp.test.jp has SRV record 0 100 389 dc2.test.jp. _ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp. _ldap._tcp.test.jp has SRV record 0 100 389 dc1.test.jp. [man ~]# host -t SRV _kerberos._udp.test.jp _kerberos._udp.test.jp has SRV record 0 100 88 dc1.test.jp. _kerberos._udp.test.jp has SRV record 0 100 88 dc2.test.jp. _kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp. [man ~]# host -t A test.jp test.jp has address 192.168.1.143 test.jp has address 192.168.1.24 test.jp has address 192.168.1.42 test.jp has address 192.168.1.34 [man ~]# smbclient //192.168.1.24/netlogon -Uadministrator Enter TEST\administrator's password: Try "help" to get a list of possible commands. smb: \> ls . D 0 Sat Nov 28 06:54:46 2020 .. D 0 Sat Nov 28 06:54:46 2020 124869119 blocks of size 4096. 109870761 blocks available smb: \> exit [man ~]# smbclient //192.168.1.24/sysvol -Uadministrator Enter TEST\administrator's password: Try "help" to get a list of possible commands. smb: \> ls . D 0 Sat Nov 28 06:54:46 2020 .. D 0 Sat Nov 28 06:54:46 2020 test.jp Dr 0 Sat Nov 28 06:54:46 2020 124869119 blocks of size 4096. 109870760 blocks available smb: \> exit [man ~]# net ads lookup Information for Domain Controller: 192.168.1.143 Response Type: LOGON_SAM_LOGON_RESPONSE_EX GUID: feabb66c-dd8b-489d-8e9a-8c72474ce583 Flags: Is a PDC: no Is a GC of the forest: yes Is an LDAP server: yes Supports DS: yes Is running a KDC: yes Is running time services: yes Is the closest DC: yes Is writable: yes Has a hardware clock: no Is a non-domain NC serviced by LDAP server: no Is NT6 DC that has some secrets: no Is NT6 DC that has all secrets: yes Runs Active Directory Web Services: yes Runs on Windows 2012 or later: yes Forest: test.jp Domain: test.jp Domain Controller: dc2.test.jp Pre-Win2k Domain: TEST Pre-Win2k Hostname: DC2 Server Site Name: Default-First-Site-Name Client Site Name: Default-First-Site-Name NT Version: 5 LMNT Token: ffff LM20 Token: ffff [man ~]# dig test.jp ; <<>> DiG 9.16.8 <<>> test.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18385 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4000 ;; QUESTION SECTION: ;test.jp. IN A ;; ANSWER SECTION: test.jp. 600 IN A 192.168.1.34 test.jp. 600 IN A 192.168.1.42 test.jp. 600 IN A 192.168.1.24 test.jp. 600 IN A 192.168.1.143 ;; Query time: 3 msec ;; SERVER: 192.168.1.24#53(192.168.1.24) ;; WHEN: 土 12月 05 13:05:42 JST 2020 ;; MSG SIZE rcvd: 100 [man ~]# smbclient -L localhost -U% do_connect: Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED) [man ~]# smbclient -L 192.168.1.24 -U% Sharename Type Comment --------- ---- ------- SMB1 disabled -- no workgroup available [man ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator@TEST.JP Valid starting Expires Service principal 2020-12-05T13:00:22 2020-12-05T23:00:22 krbtgt/TEST.JP@TEST.JP renew until 2020-12-06T13:00:16 [man ~]# wbinfo -t checking the trust secret for domain TEST via RPC calls succeeded [man ~]# wbinfo -g TEST\domain computers TEST\cert publishers TEST\domain users TEST\domain guests TEST\ras and ias servers TEST\allowed rodc password replication group TEST\enterprise read-only domain controllers TEST\cloneable domain controllers TEST\protected users TEST\key admins TEST\enterprise key admins TEST\domain controllers TEST\read-only domain controllers TEST\denied rodc password replication group TEST\group policy creator owners TEST\enterprise admins TEST\domain admins TEST\schema admins TEST\dnsadmins TEST\dnsupdateproxy [man ~]# cat /etc/os-release NAME="Manjaro Linux" ID=manjaro ID_LIKE=arch BUILD_ID=rolling PRETTY_NAME="Manjaro Linux" ANSI_COLOR="32;1;24;144;200" HOME_URL="https://manjaro.org/" DOCUMENTATION_URL="https://wiki.manjaro.org/" SUPPORT_URL="https://manjaro.org/" BUG_REPORT_URL="https://bugs.manjaro.org/" LOGO=manjarolinux [man ~]# samba -V Version 4.13.2 [man ~]#