...
を参照してsamba-tool domain provision を行い、よしなに内容を入力する
| コード ブロック |
|---|
root@debian:~# rm /etc/samba/smb.conf root@debian:~# samba-tool domain provision --server-role=dc --use-rfc2307 ※入力時の内容が流れてしまったので正確ではない Realm [--dns-backend=SAMBA_INTERNAL --realm=dev.lan]: --domain=dev.lan Domain [dev]: dev Server Role (dc, member, standalone) [dc]: dc DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]: SAMBA_INTERNAL DNS forwarder IP address (write 'none' to disable forwarding) [10.99.0.1]: 8.8.8.8 Administrator password: Passw0rd Retype password: Passw0rd --adminpass=Passw0rd Looking up IPv4 addresses Looking up IPv6 addresses No IPv6 address will be assigned Setting up secrets.ldb Setting up the registry Setting up the privileges database Setting up idmap db Setting up SAM db Setting up sam.ldb partitions and settings Setting up sam.ldb rootDSE Pre-loading the Samba 4 and AD schema Adding DomainDN: DC=dev,DC=deb Adding configuration container Setting up sam.ldb schema Setting up sam.ldb configuration data Setting up display specifiers Modifying display specifiers Adding users container Modifying users container Adding computers container Modifying computers container Setting up sam.ldb data Setting up well known security principals Setting up sam.ldb users and groups Setting up self join Adding DNS accounts Creating CN=MicrosoftDNS,CN=System,DC=dev,DC=lan Creating DomainDnsZones and ForestDnsZones partitions Populating DomainDnsZones and ForestDnsZones partitions Setting up sam.ldb rootDSE marking as synchronized Fixing provision GUIDs A Kerberos configuration suitable for Samba 4 has been generated at /var/lib/samba/private/krb5.conf Setting up fake yp server settings Once the above files are installed, your Samba4 server will be ready to use Server Role: active directory domain controller Hostname: debian NetBIOS Domain: DEV DNS Domain: dev.lan DOMAIN SID: S-1-5-21-3978880503-891640854-1088594067 |
出来上がった内容がこちら
| コード ブロック |
|---|
root@debian:~# cat /etc/samba/smb.conf
# Global parameters
[global]
workgroup = DEV
realm = DEV.LAN
netbios name = DEBIAN
server role = active directory domain controller
dns forwarder = 8.8.8.8
idmap_ldb:use rfc2307 = yes
[netlogon]
path = /var/lib/samba/sysvol/dev.lan/scripts
read only = No
[sysvol]
path = /var/lib/samba/sysvol
read only = No |
...