GSTN - Smaba PDC document - Revision history

Biswajit at 04:51, 31 January 2019

2019-01-31T04:51:06Z

← Older revision		Revision as of 04:51, 31 January 2019
Line 1:		Line 1:
			[[category:GSTN]]

	<div style="color:#00000a;"></div>		<div style="color:#00000a;"></div>

Biswajit: /* Setup a Samba Active Directory Domain Controller */

2019-01-30T14:38:38Z

Setup a Samba Active Directory Domain Controller

← Older revision		Revision as of 14:38, 30 January 2019
Line 82:		Line 82:


	= ~~{{anchor\|RefHeading2063957709649}}~~ Setup a Samba Active Directory Domain Controller =		= Setup a Samba Active Directory Domain Controller =

	== ~~{{anchor\|RefHeading2065957709649}}~~ Configure yum repository for Packages installation. ==		== Configure yum repository for Packages installation. ==

	<div style="color:#00000a;">Edit /etc/yum.repos.d/local.repo </div>		<div style="color:#00000a;">Edit /etc/yum.repos.d/local.repo </div>
Line 115:		Line 115:


	== ~~{{anchor\|RefHeading2067957709649}}~~ Assign the Ipv4 address and restart the network services. ==		== Assign the Ipv4 address and restart the network services. ==

	<div style="color:#00000a;"><nowiki># nmcli connection modify eth0 ipv4.addresses 172.18.101.14/24 ipv4.method manual ipv4.gateway 172.18.101.1 connection.autoconnect yes ipv4.dns 172.18.101.14</nowiki></div>		<div style="color:#00000a;"><nowiki># nmcli connection modify eth0 ipv4.addresses 172.18.101.14/24 ipv4.method manual ipv4.gateway 172.18.101.1 connection.autoconnect yes ipv4.dns 172.18.101.14</nowiki></div>
Line 125:		Line 125:


	== ~~{{anchor\|RefHeading2069957709649}}~~ Assign the Ipv6 address and restart the network services. And set hostname. ==		== Assign the Ipv6 address and restart the network services. And set hostname. ==

	<div style="color:#00000a;"><nowiki># nmcli connection modify eth0 ipv6.addresses 2404:a800:1000:d:7800::e/69 ipv6.method manual ipv6.gateway 2404:a800:1000:d:7800::1 connection.autoconnect yes ipv6.dns 2404:a800:1000:d:7800::e</nowiki></div>		<div style="color:#00000a;"><nowiki># nmcli connection modify eth0 ipv6.addresses 2404:a800:1000:d:7800::e/69 ipv6.method manual ipv6.gateway 2404:a800:1000:d:7800::1 connection.autoconnect yes ipv6.dns 2404:a800:1000:d:7800::e</nowiki></div>
Line 133:		Line 133:


	[[Image:Image3.png]]== ~~{{anchor\|RefHeading2071957709649}}~~ Edit /etc/hosts file and make below entries. ==		[[Image:Image3.png]]== Edit /etc/hosts file and make below entries. ==

	<div style="color:#00000a;"><nowiki># vi /etc/hosts</nowiki></div>		<div style="color:#00000a;"><nowiki># vi /etc/hosts</nowiki></div>
Line 150:		Line 150:


	== ~~{{anchor\|RefHeading2073957709649}}~~ Restart network service. ==		== Restart network service. ==

	<div style="color:#00000a;"><nowiki># systemctl restart network.service</nowiki></div>		<div style="color:#00000a;"><nowiki># systemctl restart network.service</nowiki></div>
Line 158:		Line 158:


	== ~~{{anchor\|RefHeading2075957709649}}~~ Reboot server. ==		== Reboot server. ==

	<div style="color:#00000a;"><nowiki># init 6</nowiki></div>		<div style="color:#00000a;"><nowiki># init 6</nowiki></div>


	[[Image:Image6.png]]== ~~{{anchor\|RefHeading2077957709649}}~~ Install Dependencies for samba installation. ==		[[Image:Image6.png]]== Install Dependencies for samba installation. ==


Line 170:		Line 170:


	[[Image:Image7.png]]== ~~{{anchor\|RefHeading2079957709649}}~~ Dependencies Installation is completed. ==		[[Image:Image7.png]]== Dependencies Installation is completed. ==


Line 177:		Line 177:


	<div style="color:#00000a;"></div>= ~~{{anchor\|RefHeading2081957709649}}~~ Samba Installation =		<div style="color:#00000a;"></div>= Samba Installation =

	== ~~{{anchor\|RefHeading2083957709649}}~~ Download samba file from [https://www.samba.org/ https://www.samba.org/] and extract it. ==		== Download samba file from [https://www.samba.org/ https://www.samba.org/] and extract it. ==

	<div style="color:#00000a;"><nowiki># tar xvzf samba-4.4.4.tar.gz</nowiki></div>		<div style="color:#00000a;"><nowiki># tar xvzf samba-4.4.4.tar.gz</nowiki></div>


	[[Image:Image9.png]]== ~~{{anchor\|RefHeading2085957709649}}~~ Enter in samba-4.4.4 directory and run configure command. ==		[[Image:Image9.png]]== Enter in samba-4.4.4 directory and run configure command. ==


Line 202:		Line 202:


	== ~~{{anchor\|RefHeading2087957709649}}~~ Run make command. ==		== Run make command. ==

	<div style="color:#00000a;"><nowiki># make</nowiki></div>		<div style="color:#00000a;"><nowiki># make</nowiki></div>
Line 214:		Line 214:


	[[Image:Image13.png]]== ~~{{anchor\|RefHeading2089957709649}}~~ Run make install command. ==		[[Image:Image13.png]]== Run make install command. ==

	<div style="color:#00000a;"><nowiki># make install</nowiki></div>		<div style="color:#00000a;"><nowiki># make install</nowiki></div>


	[[Image:Image14.png]]== ~~{{anchor\|RefHeading2091957709649}}~~ Provision a new domain: ==		[[Image:Image14.png]]== Provision a new domain: ==


Line 226:		Line 226:


	[[Image:Image15.png]]== ~~{{anchor\|RefHeading2093957709649}}~~ Provisioning completed successfully. ==		[[Image:Image15.png]]== Provisioning completed successfully. ==



	[[Image:Image16.png]]		[[Image:Image16.png]]


	= {{anchor\|RefHeading2095957709649}} Initialisation =		= {{anchor\|RefHeading2095957709649}} Initialisation =

Biswajit: Created page with "

<..."

2019-01-30T09:59:10Z

Created page with " <div style="color:#00000a;"></div> <div style="color:#00000a;"></div> <div style="color:#00000a;"></div> <div style="color:#00000a;"></div> <div style="color:#00000a;"><..."

New page

<div style="color:#00000a;"></div>

<div style="color:#00000a;"></div>

<div style="color:#00000a;"></div>

<div style="color:#00000a;"></div>

<div style="color:#00000a;"></div>

<div style="color:#00000a;"></div>

<div style="color:#00000a;"></div>

<div style="color:#00000a;"></div>

Samba AD

As is Build for Domain Controller installation

Date : 08.08.2016

Document Version : 1.0

Table of Contents[[#RefHeading2063957709649|1.Setup a Samba Active Directory Domain Controller]]

:[[#RefHeading2065957709649|1.1.Configure yum repository for Packages installation.]]

:[[#RefHeading2067957709649|1.2.Assign the Ipv4 address and restart the network services.]]

:[[#RefHeading2069957709649|1.3.Assign the Ipv6 address and restart the network services. And set hostname.]]

:[[#RefHeading2071957709649|1.4.Edit /etc/hosts file and make below entries.]]

:[[#RefHeading2073957709649|1.5.Restart network service.]]

:[[#RefHeading2075957709649|1.6.Reboot server.]]

:[[#RefHeading2077957709649|1.7.Install Dependencies for samba installation.]]

:[[#RefHeading2079957709649|1.8.Dependencies Installation is completed.]]

[[#RefHeading2081957709649|2.Samba Installation]]

:[[#RefHeading2083957709649|2.1.Download samba file from https://www.samba.org/ and extract it.]]

:[[#RefHeading2085957709649|2.2.Enter in samba-4.4.4 directory and run configure command.]]

:[[#RefHeading2087957709649|2.3.Run make command.]]

:[[#RefHeading2089957709649|2.4.Run make install command.]]

:[[#RefHeading2091957709649|2.5.Provision a new domain:]]

:[[#RefHeading2093957709649|2.6.Provisioning completed successfully.]]

[[#RefHeading2095957709649|3.Initialisation]]

:[[#RefHeading2097957709649|3.1.Samba doesn't yet have init scripts included]]

:[[#RefHeading2099957709649|3.2.Set the permissions on samba4 file.]]

:[[#RefHeading2101957709649|3.3.Restart samba]]

:[[#RefHeading2103957709649|3.4.Run "smbclient"]]

:[[#RefHeading2105957709649|3.5.Open /etc/named.conf file.]]

:[[#RefHeading2107957709649|3.6.DNS keytab]]

:[[#RefHeading2109957709649|3.7.Also make below entry in named.conf]]

:[[#RefHeading2111957709649|3.8.Change the owner ship as below and restart named services.]]

:[[#RefHeading2113957709649|3.9.Copy Kerberos]]<div style="color:#00000a;"></div>

= {{anchor|RefHeading2063957709649}} Setup a Samba Active Directory Domain Controller =

== {{anchor|RefHeading2065957709649}} Configure yum repository for Packages installation. ==

<div style="color:#00000a;">Edit /etc/yum.repos.d/local.repo </div>

<div style="color:#00000a;"><nowiki># vi /etc/yum.repos.d/local.repo </nowiki></div>

[[Image:Picture.png]]

<div style="color:#00000a;">Make below entries. Save file and exit.</div>

<div style="color:#00000a;">[local]</div>

<div style="color:#00000a;">name=local</div>

<div style="color:#00000a;">baseurl=file:///mnt</div>

<div style="color:#00000a;">gpgcheck=0</div>

<div style="color:#00000a;">enabled=1</div>

[[Image:Image1.png]]

== {{anchor|RefHeading2067957709649}} Assign the Ipv4 address and restart the network services. ==

<div style="color:#00000a;"><nowiki># nmcli connection modify eth0 ipv4.addresses 172.18.101.14/24 ipv4.method manual ipv4.gateway 172.18.101.1 connection.autoconnect yes ipv4.dns 172.18.101.14</nowiki></div>

<div style="color:#00000a;"><nowiki># systemctl restart network.service</nowiki></div>

[[Image:Image2.png]]

== {{anchor|RefHeading2069957709649}} Assign the Ipv6 address and restart the network services. And set hostname. ==

<div style="color:#00000a;"><nowiki># nmcli connection modify eth0 ipv6.addresses 2404:a800:1000:d:7800::e/69 ipv6.method manual ipv6.gateway 2404:a800:1000:d:7800::1 connection.autoconnect yes ipv6.dns 2404:a800:1000:d:7800::e</nowiki></div>

<div style="color:#00000a;"><nowiki># hostnamectl set-hostname gd9103.gstn.local</nowiki></div>

[[Image:Image3.png]]== {{anchor|RefHeading2071957709649}} Edit /etc/hosts file and make below entries. ==

<div style="color:#00000a;"><nowiki># vi /etc/hosts</nowiki></div>

<div style="color:#00000a;">172.18.101.14gd9103.gstn.localgd9103</div>

<div style="color:#00000a;"></div>

<div style="color:#00000a;">2404:a800:1000:d:7800::egd9103.gstn.localgd9103</div>

[[Image:Image4.png]]

== {{anchor|RefHeading2073957709649}} Restart network service. ==

<div style="color:#00000a;"><nowiki># systemctl restart network.service</nowiki></div>

[[Image:Image5.png]]

== {{anchor|RefHeading2075957709649}} Reboot server. ==

<div style="color:#00000a;"><nowiki># init 6</nowiki></div>

[[Image:Image6.png]]== {{anchor|RefHeading2077957709649}} Install Dependencies for samba installation. ==

<div style="color:#00000a;"><nowiki># yum install perl gcc attr libacl-devel libblkid-devel gnutls-devel readline-devel python-devel gdb pkgconfig krb5-workstation zlib-devel setroubleshoot-server libaio-devel setroubleshoot-plugins policycoreutils-python libsemanage-python perl-ExtUtils-MakeMaker perl-Parse-Yapp perl-Test-Base popt-devel libxml2-devel libattr-devel keyutils-libs-devel cups-devel bind-utils libxslt docbook-style-xsl openldap-devel autoconf python-crypto pam-devel</nowiki></div>

[[Image:Image7.png]]== {{anchor|RefHeading2079957709649}} Dependencies Installation is completed. ==

[[Image:Image8.png]]

<div style="color:#00000a;"></div>= {{anchor|RefHeading2081957709649}} Samba Installation =

== {{anchor|RefHeading2083957709649}} Download samba file from [https://www.samba.org/ https://www.samba.org/] and extract it. ==

<div style="color:#00000a;"><nowiki># tar xvzf samba-4.4.4.tar.gz</nowiki></div>

[[Image:Image9.png]]== {{anchor|RefHeading2085957709649}} Enter in samba-4.4.4 directory and run configure command. ==

<div style="color:#00000a;"><nowiki># cd samba-4.4.4/</nowiki></div>

<div style="color:#00000a;"><nowiki># ./configure</nowiki></div>

[[Image:Image10.png]]

<div style="color:#00000a;">Now configure done successfully.</div>

[[Image:Image11.png]]

== {{anchor|RefHeading2087957709649}} Run make command. ==

<div style="color:#00000a;"><nowiki># make</nowiki></div>

[[Image:Image12.png]]

<div style="color:#00000a;">Make command finished successfully.</div>

[[Image:Image13.png]]== {{anchor|RefHeading2089957709649}} Run make install command. ==

<div style="color:#00000a;"><nowiki># make install</nowiki></div>

[[Image:Image14.png]]== {{anchor|RefHeading2091957709649}} Provision a new domain: ==

<div style="color:#00000a;"><nowiki># /usr/local/samba/bin/samba-tool domain provision --use-rfc2307 --interactive</nowiki></div>

[[Image:Image15.png]]== {{anchor|RefHeading2093957709649}} Provisioning completed successfully. ==

[[Image:Image16.png]]

= {{anchor|RefHeading2095957709649}} Initialisation =

== {{anchor|RefHeading2097957709649}} Samba doesn't yet have init scripts included ==

# we can copy script from below link. [https://wiki.samba.org/index.php/Samba4/InitScript https://wiki.samba.org/index.php/Samba4/InitScript]
# create a file /etc/rc.d/init.d/samba4

<div style="color:#00000a;"></div>

<div style="color:#00000a;"><nowiki># vi /etc/rc.d/init.d/samba4</nowiki></div>

<div style="color:#00000a;">and paste the below content in this file. </div>

<div style="color:#00000a;">________________________________</div>

<div style="color:#00000a;"><nowiki>#! /bin/bash</nowiki></div>

<div style="color:#00000a;"><nowiki>#</nowiki></div>

<div style="color:#00000a;"><nowiki># samba4 Bring up/down samba4 service</nowiki></div>

<div style="color:#00000a;"><nowiki>#</nowiki></div>

<div style="color:#00000a;"><nowiki># chkconfig: - 90 10</nowiki></div>

<div style="color:#00000a;"><nowiki># description: Activates/Deactivates all samba4 interfaces configured to \</nowiki></div>

<div style="color:#00000a;"><nowiki># start at boot time.</nowiki></div>

<div style="color:#00000a;"><nowiki>#</nowiki></div>

<div style="color:#00000a;"><nowiki>### BEGIN INIT INFO</nowiki></div>

<div style="color:#00000a;"><nowiki># Provides:</nowiki></div>

<div style="color:#00000a;"><nowiki># Should-Start:</nowiki></div>

<div style="color:#00000a;"><nowiki># Short-Description: Bring up/down samba4</nowiki></div>

<div style="color:#00000a;"><nowiki># Description: Bring up/down samba4</nowiki></div>

<div style="color:#00000a;"><nowiki>### END INIT INFO</nowiki></div>

<div style="color:#00000a;"><nowiki># Source function library.</nowiki></div>

<div style="color:#00000a;">. /etc/init.d/functions</div>

<div style="color:#00000a;">if [ -f /etc/sysconfig/samba4 ]; then</div>

<div style="color:#00000a;">. /etc/sysconfig/samba4</div>

<div style="color:#00000a;">fi</div>

<div style="color:#00000a;">CWD=$(pwd)</div>

<div style="color:#00000a;">prog="samba4"</div>

<div style="color:#00000a;">start() {</div>

<div style="color:#00000a;"><nowiki># Attach irda device</nowiki></div>

<div style="color:#00000a;">echo -n $"Starting $prog: "</div>

<div style="color:#00000a;">/usr/local/samba/sbin/samba</div>

<div style="color:#00000a;">sleep 2</div>

<div style="color:#00000a;">if ps ax | grep -v "grep" | grep -q /samba/sbin/samba ; then success $"samba4 startup"; else failure $"samba4 startup"; fi</div>

<div style="color:#00000a;">echo</div>

<div style="color:#00000a;">}</div>

<div style="color:#00000a;">stop() {</div>

<div style="color:#00000a;"><nowiki># Stop service.</nowiki></div>

<div style="color:#00000a;">echo -n $"Shutting down $prog: "</div>

<div style="color:#00000a;">killall samba</div>

<div style="color:#00000a;">sleep 2</div>

<div style="color:#00000a;">if ps ax | grep -v "grep" | grep -q /samba/sbin/samba ; then failure $"samba4 shutdown"; else success $"samba4 shutdown"; fi</div>

<div style="color:#00000a;">echo</div>

<div style="color:#00000a;">}</div>

<div style="color:#00000a;">status() {</div>

<div style="color:#00000a;">/usr/local/samba/sbin/samba --show-build</div>

<div style="color:#00000a;">}</div>

<div style="color:#00000a;"><nowiki># See how we were called.</nowiki></div>

<div style="color:#00000a;">case "$1" in</div>

<div style="color:#00000a;">start)</div>

<div style="color:#00000a;">start</div>

<div style="color:#00000a;"><nowiki>;;</nowiki></div>

<div style="color:#00000a;">stop)</div>

<div style="color:#00000a;">stop</div>

<div style="color:#00000a;"><nowiki>;;</nowiki></div>

<div style="color:#00000a;">status)</div>

<div style="color:#00000a;">status irattach</div>

<div style="color:#00000a;"><nowiki>;;</nowiki></div>

<div style="color:#00000a;">restart|reload)</div>

<div style="color:#00000a;">stop</div>

<div style="color:#00000a;">start</div>

<div style="color:#00000a;"><nowiki>;;</nowiki></div>

<div style="color:#00000a;"><nowiki>*)</nowiki></div>

<div style="color:#00000a;">echo $"Usage: $0 {start|stop|restart|status}"</div>

<div style="color:#00000a;">exit 1</div>

<div style="color:#00000a;">esac</div>

<div style="color:#00000a;">exit 0</div>

<div style="color:#00000a;">______________________________________________________________________________</div>

[[Image:Image17.png]]

== {{anchor|RefHeading2099957709649}} Set the permissions on samba4 file. ==

<div style="color:#00000a;"><nowiki># chmod 755 /etc/rc.d/init.d/samba4</nowiki></div>

<div style="color:#00000a;"><nowiki># chmod +x /etc/rc.d/init.d/samba4</nowiki></div>

<div style="color:#00000a;"><nowiki># ln -s /etc/rc.d/init.d/samba4 /etc/rc3.d/S80samba4</nowiki></div>

<div style="color:#00000a;"><nowiki># chkconfig --add samba4</nowiki></div>

<div style="color:#00000a;"><nowiki># chkconfig samba4 on</nowiki></div>

[[Image:Image18.png]]== {{anchor|RefHeading2101957709649}} Restart samba ==

<div style="color:#00000a;"><nowiki># service samba4 restart</nowiki></div>

<div style="color:#00000a;">or ''systemctl start samba4.service''</div>

[[Image:Image19.png]]

== {{anchor|RefHeading2103957709649}} Run "smbclient" ==

<div style="color:#00000a;">This is done to check if Samba provides the AD DC default shares "netlogon" and "sysvol", that were created in "smb.conf" during provisioning.</div>

<div style="color:#00000a;"><nowiki># /usr/local/samba/bin/smbclient -L localhost -U%</nowiki></div>

[[Image:Image20.png]]== {{anchor|RefHeading2105957709649}} Open /etc/named.conf file. ==

<div style="color:#00000a;"><nowiki># vi /etc/named.conf</nowiki></div>

[[Image:Image21.png]]== {{anchor|RefHeading2107957709649}} DNS keytab ==

<div style="color:#00000a;">This file was automatically created during provisioning/updating. Add the following' tkey-gssapi-keytab' option to the 'options' section of your named.conf, and set other values as shown in screen shot.</div>

tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab";

[[Image:Image22.png]]== {{anchor|RefHeading2109957709649}} Also make below entry in named.conf ==

<div style="color:#00000a;"></div>

include "/usr/local/samba/private/named.conf";

[[Image:Image23.png]]== {{anchor|RefHeading2111957709649}} Change the owner ship as below and restart named services. ==

<div style="color:#00000a;"><nowiki># chown named.named /var/named/</nowiki></div>

<div style="color:#00000a;"><nowiki># chgrp named /usr/local/samba/private/dns.keytab</nowiki></div>

<div style="color:#00000a;"><nowiki># chmod g+r /usr/local/samba/private/dns.keytab</nowiki></div>

<div style="color:#00000a;"><nowiki># systemctl enable named.service</nowiki></div>

<div style="color:#00000a;"><nowiki># systemctl restart named.service</nowiki></div>== {{anchor|RefHeading2113957709649}} Copy Kerberos ==

<div style="color:#00000a;">file /usr/local/samba/private/krb5.conf to /etc/krb5.conf</div>

<div style="color:#00000a;"><nowiki># cp /etc/krb5.conf /etc/krb5.conf.ori</nowiki></div>

<div style="color:#00000a;"><nowiki># cp /usr/local/samba/private/krb5.conf /etc/krb5.conf</nowiki></div>

[[Image:Image24.png]]

<div style="color:#00000a;"></div>

GSTN - Smaba PDC document - Revision history

Biswajit at 04:51, 31 January 2019

Biswajit: /* Setup a Samba Active Directory Domain Controller */

Biswajit: Created page with " <..."

Biswajit: Created page with "

<..."