AD - DC – Novo dominio.#

  1. Pacotes necessários:

apt -y install samba smbclient winbind libpam-winbind libnss-winbind krb5-kdc libpam-krb5

  1. Inicio: Removendo ou redefinindo as configurações atual do samba:

rm /etc/krb5.conf /etc/samba/smb.conf /var/lib/samba/* /var/lib/krb5kdc/* -rfv

  1. Provicionando um novo domínio:

samba-tool domain provision --server-role=dc --use-rfc2307 --dns-backend=SAMBA_INTERNAL --realm=SrvFS.SANDOM.ME.DOMINIO --domain=DOMLOCAL --adminpass=P4ssword

  1. Configurando o Kerberos /etc/krb5.conf cp /var/lib/samba/private/krb5.conf /etc/

  2. Configura-se o arquivo com basse neste: (solução de problemas anteriores)

[libdefaults]
        default_realm = SRVFS.SANDOM.ME.DOMINIO
        dns_lookup_realm = false
        dns_lookup_kdc = true
        rdns = false

[realms]
SRVFS.SANDOM.ME.DOMINIO = {
        default_domain = srvfs.sandom.me.dominio
        admin_domain = srvfs.sandom.me.dominio
        kdc = srvfs.sandom.me.dominio
}

[domain_realm]
        SrvFS = SRVFS.SANDOM.ME.DOMINIO
        .SrvFS = SRVFS.SANDOM.ME.DOMINIO
  1. systemclt:
systemctl stop smbd nmbd winbind
systemctl disable smbd nmbd winbind

systemctl unmask samba-ad-dc 
systemctl start samba-ad-dc 
systemctl enable samba-ad-dc
  1. Testa se o serviço “ad-dc” está funcionando:

smbclient -L localhost -U%

+ Saída:

	Sharename       Type      Comment
	---------       ----      -------
	sysvol          Disk      
	netlogon        Disk      
	IPC$            IPC       IPC Service (Samba 4.17.12-Debian)
SMB1 disabled -- no workgroup available
7. Testando o funcionamento do Srv.

# host -t SRV _ldap._tcp.monkeypantz.lan
_ldap._tcp.monkeypantz.lan has no SRV record


# kinit Administrator

Password for Administrator@SRVFS.SANDOM.ME.DOMINIO: Warning: Your password will expire in 41 days on qui 15 fev 2024 13:13:12



<!-- vim: ft=markdown:tw=120:st=3 -->