[samba-jp:22857] Re: BDCの追加について

[小林 崇史｜Takashi KOBAYASHI]

小田切様

ご返信下さいまして有難うございます。

> 設定手順やsmb.confを提示してください。

次のような手順で環境を設定しました。

----------
1. CentOSをMinimalでインストール

2. nmtuiでネットワーク設定

3. Sambaのコンパイル前の下準備
	# yum -y groupinstall base "Development tools"
	# yum -y install perl gcc libacl-devel libblkid-devel gnutls-devel \
		readline-devel python-devel gdb pkgconfig krb5-workstation \
		zlib-devel setroubleshoot-server libaio-devel \
		setroubleshoot-plugins policycoreutils-python \
		libsemanage-python setools-libs-python setools-libs \
		popt-devel libpcap-devel sqlite-devel libidn-devel \
		libxml2-devel libacl-devel libsepol-devel libattr-devel \
		keyutils-libs-devel cyrus-sasl-devel cups-devel bind-utils \
		libxslt docbook-style-xsl openldap-devel pam-devel

4. Sambaのダウンロードおよびインストール
	# cd /usr/local/src
	# wget http://www.samba.org/samba/ftp/samba-4.6.15.tar.gz
	# tar zxvf samba-latest.tar.gz
	# cd samba-4.6.15
	# ./configure && make && make install
	
5. kerberos関連設定
	# vi /etc/krb5.conf
		# Configuration snippets may be placed in this directory as well
		#includedir /etc/krb5.conf.d/
		
		[logging]
		 default = FILE:/var/log/krb5libs.log
		 kdc = FILE:/var/log/krb5kdc.log
		 admin_server = FILE:/var/log/kadmind.log
		
		[libdefaults]
		 dns_lookup_realm = true
		 dns_lookup_kdc = true
		 ticket_lifetime = 24h
		 renew_lifetime = 7d
		 forwardable = true
		 rdns = false
		 default_realm = TEST.LOCAL
		 default_ccache_name = KEYRING:persistent:%{uid}
		
		[realms]
		 TEST.LOCAL = {
		  kdc = dc1.test.local
		  admin_server = dc1.test.local
		 }
		
		[domain_realm]
		 .test.local = TEST.LOCAL
		 test.local = TEST.LOCAL

	# kinit administrator ＠ TEST.LOCAL
	※実行結果は何も表示されないことを確認

6. ドメイン参加
	# /usr/local/samba/bin/samba-tool domain join test.local DC -U administrator --realm=TEST.LOCAL
	※Joined domain TEST (SID S-x-x-xx-xxxxxxxxx-xxxxxxxxx-xxxxxxxxxx) as a DCという行が出力されたことを確認

7. Samba設定ファイル編集
	# vi /usr/local/samba/etc/smb.conf
		# Global parameters
		[global]
		        netbios name = DC2
		        realm = TEST.LOCAL
		        server role = active directory domain controller
		        workgroup = TEST
		        dns forwarder = 8.8.8.8
			allow dns updates = nonsecure
		
		[netlogon]
		        path = /usr/local/samba/var/locks/sysvol/test.local/scripts
		        read only = No
		
		[sysvol]
		        path = /usr/local/samba/var/locks/sysvol
		        read only = No

8. Samba起動スクリプト作成･起動
----------

以上です。他に必要な情報がございましたら、ご指示下さい。