33
edits
Changes
Jump to navigation
Jump to search
Line 1:
Line 1: + Line 12:
Line 13: + + + + + + + + + + + + + + + + + + + + + +
Systems/Services/Samba (view source)
Revision as of 21:56, 13 September 2020
, 21:56, 13 September 2020no edit summary
{{mbox |type=warning |text=This information is out of date. [[IT Infrastructure|Up-to-date IT information can be found here]] }}
== Creating SSL CA and certs ==
== Creating SSL CA and certs ==
openssl x509 -req -in dc01.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out dc01.crt -days 500
openssl x509 -req -in dc01.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out dc01.crt -days 500
</pre>
</pre>
== Installing keys ==
Copy them into place (bob):
* /var/lib/samba/private/tls/bob.key
* /var/lib/samba/private/tls/bob.crt
* /var/lib/samba/private/tls/rootCA.pem
Tell samba to use them:
<pre>
[global]
tls enabled = yes
tls keyfile = tls/bob.key
tls certfile = tls/bob.crt
tls cafile = tls/rootCA.pem
</pre>
== Tell Samba to stop expiring passwords ==
samba-tool domain passwordsettings set --max-pwd-age=0