Difference between revisions of "Howto Add a Samba4 Domain Controller"

From Pumping Station One
Jump to navigation Jump to search
(→‎DNS Records: fixed grammer, bulleted list)
Line 10: Line 10:
  
 
== Samba ==
 
== Samba ==
 +
There is no stable, working version of Samba 4 shipping with ubuntu.  You have to download it from source for now.  As of writing, version 4.0.5 works
  
 
   git clone -b v4-0-stable git://git.samba.org/samba.git samba
 
   git clone -b v4-0-stable git://git.samba.org/samba.git samba

Revision as of 05:28, 12 April 2013

DNS Records

  • Set an A record for auth.pumpingstationone.org
  • Set a NS record for ad.pumpingstationone.org to auth.pumpingstationone.org

Host Setup

echo "auth.pumpingstationone.org" > /etc/hostname add 66.228.35.181 auth.ad.arbitrarion.com auth to beginning of /etc/hosts

Samba

There is no stable, working version of Samba 4 shipping with ubuntu. You have to download it from source for now. As of writing, version 4.0.5 works

 git clone -b v4-0-stable git://git.samba.org/samba.git samba
 ./configure
 make
 make install

Provisioning

  /usr/local/samba/bin/samba-tool domain provision --realm=ad.pumpingstationone.org --domain=PS1 --server-role=dc

Make a note of the admin password. You may need it later.

Kerberos

 apt-get install kerberos

/etc/krb5.conf

  [libdefaults]
     default_realm = AD.ARBITRARION.COM
     dns_lookup_realm = false
     dns_lookup_kdc = true

Adding Users

  /usr/local/samba/bin/samba-tool user add hef

The user add command will prompt for a password, and must meet complexity requirements.

  /usr/local/samba/bin/samba-tool group addmembers "Domain Admins" hef