Difference between revisions of "Samba-dc"
Bunkobugsy (talk | contribs) |
Bunkobugsy (talk | contribs) |
||
| Line 28: | Line 28: | ||
This package provides templates for samba Active Directory support. More details found [https://bugs.koozali.org/show_bug.cgi?id=12798 here]. | This package provides templates for samba Active Directory support. More details found [https://bugs.koozali.org/show_bug.cgi?id=12798 here]. | ||
| − | It will replace upstream samba packages with AD enabled ones from SIG/FastTrack repo. More details found [https://git.resf.org/sig_fasttrack/meta/issues/2 here]. | + | It will replace upstream samba packages with AD enabled ones from [https://sig-fasttrack.rocky.page SIG/FastTrack] repo. More details found [https://git.resf.org/sig_fasttrack/meta/issues/2 here]. |
===Installation=== | ===Installation=== | ||
| Line 71: | Line 71: | ||
Samba in AD mode provides services that need a separate virtual interface. | Samba in AD mode provides services that need a separate virtual interface. | ||
A free static IP address needs to be chosen from the same range as SME's local network that is outside the DHCP pool. | A free static IP address needs to be chosen from the same range as SME's local network that is outside the DHCP pool. | ||
| + | |||
WARNING: changing this IP address after the domain is provisioned can cause problems and is not supported. | WARNING: changing this IP address after the domain is provisioned can cause problems and is not supported. | ||
/sbin/e-smith/db configuration setprop samba SambaIP a.b.c.d | /sbin/e-smith/db configuration setprop samba SambaIP a.b.c.d | ||
| − | |||
===Set domain administrator password=== | ===Set domain administrator password=== | ||
| − | Provisioning will fail unless a password is chosen that matches the complexity requirements. More details found [https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc786468(v=ws.10) here]. [https://wiki.koozali.org/Random_Strong_Password_Generator Random Strong Password Generator] can be used | + | Provisioning will fail unless a password is chosen that matches the complexity requirements. More details found [https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc786468(v=ws.10) here]. [https://wiki.koozali.org/Random_Strong_Password_Generator Random Strong Password Generator] can be used. |
| + | WARNING: make sure to keep a copy of this password and not to modify this key after the domain is provisioned. | ||
/sbin/e-smith/db configuration setprop samba Password Blu3Onyx! | /sbin/e-smith/db configuration setprop samba Password Blu3Onyx! | ||
| − | |||
===Provisioning=== | ===Provisioning=== | ||
Revision as of 22:01, 10 December 2024
 | |
| samba-dc logo | |
| Maintainer | maintainer |
|---|---|
| Url | https://wiki.koozali.org |
| Category | |
| Tags | File, this, with, a, list, of, tags |
Maintainer
initial work of Bunkobugsy
Version
Description
This package provides templates for samba Active Directory support. More details found here.
It will replace upstream samba packages with AD enabled ones from SIG/FastTrack repo. More details found here.
Installation
/sbin/e-smith/db yum_repositories set fasttrack-updates repository \ Name 'Rocky Linux 8.10 - SIG FastTrack Updates' \ BaseURL 'http://dl.rockylinux.org/$sigcontentdir/$releasever/fasttrack/$basearch/fasttrack-updates/' \ EnableGroups no \ GPGCheck no \ Visible yes \ Priority 9 \ status enabled
signal-event dnf-modify
dnf --enablerepo=smecontribs install smeserver-samba-dc
Configuration
you can list the available configuration with the following command :
config show samba
Some of the properties are not shown, but are defaulted in a template or a script. Here a more comprehensive list with default and expected values :
| property | default | values |
|---|---|---|
| SambaIP | numeric | |
| Password | string | |
| status | disabled | enabled,disabled |
Add samba virtual interface
Samba in AD mode provides services that need a separate virtual interface. A free static IP address needs to be chosen from the same range as SME's local network that is outside the DHCP pool.
WARNING: changing this IP address after the domain is provisioned can cause problems and is not supported.
/sbin/e-smith/db configuration setprop samba SambaIP a.b.c.d
Set domain administrator password
Provisioning will fail unless a password is chosen that matches the complexity requirements. More details found here. Random Strong Password Generator can be used.
WARNING: make sure to keep a copy of this password and not to modify this key after the domain is provisioned.
/sbin/e-smith/db configuration setprop samba Password Blu3Onyx!
Provisioning
Testing
After a successful provisioning you can confirm the domain functionality
domaininfo
and
sambastatus
Uninstall
/sbin/e-smith/db yum_repositories delete fasttrack-updates
signal-event dnf-modify
dnf remove smeserver-samba-dc
Bugs
Please raise bugs under the SME-Contribs section in bugzilla
and select the smeserver-samba-dc component or use this link
Below is an overview of the current issues for this contrib:
Changelog
Only released version in smecontrib are listed here.
