راه اندازی Active Directory Domain Controller در لینوکس ( CentOS7 )

[root@centos ~]# yum install -y epel-release 
[root@centos ~]# yum install -y python-devel libblkid-devel zlib-devel sqlite-devel e2fsprogs-devel libacl-devel gnutls-devel readline-devel systemd-devel popt-devel ncurses-devel libidn-devel libxml2-devel libacl-devel libsepol-devel libattr-devel keyutils-libs-devel krb5-pkinit krb5-server krb5-devel krb5-workstation cups-devel openssl-devel libpcap-devel pam-devel libaio-devel bind bind-utils bind-sdb sqlite-devel cyrus-sasl-devel

[root@centos ~]# wget -c https://ftp.samba.org/pub/samba/stable/samba-4.6.5.tar.gz
[root@centos ~]# tar -zxvf samba-4.6.5.tar.gz -C /srv
[root@centos ~]# cd /srv/samba-4.6.5

[root@centos samba-4.6.5]# ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-selftest --enable-fhs --with-ads --with-syslog --with-winbind --with-regedit --with-systemd --with-piddir=/var/run --with-sockets-dir=/var/run
[root@centos samba-4.6.5]# make && make install

[root@centos ~]# rm -rf /etc/samba/smb.conf

[root@server ~]# samba-tool domain provision --use-rfc2307 --interactive
Realm : ITPRO.LOCAL
Domain : ITPRO
Server Role [dc]: dc
DNS Backend [SAMBA_INTERNAL]: BIND9_DLZ

[root@centos ~]# vim /usr/lib/systemd/system/samba-ad.service
[Unit]
Description=Samba AD Daemon
After=syslog.target network.target

[Service]
Type=forking
NotifyAccess=all
PIDFile=/var/run/samba.pid
EnvironmentFile=-/etc/sysconfig/samba
ExecStartPre=/usr/bin/rm -f /var/run/samba.pid
ExecStart=/usr/sbin/samba
ExecReload=/usr/bin/kill -s HUP $MAINPID
KillSignal=SIGOUT
KillMode=process

[Install]
WantedBy=multi-user.target

[root@centos ~]# systemctl start samba-ad && systemctl enable samba-ad

[root@centos ~]# vim /etc/named.conf
options {
        tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
        listen-on port 53 { 127.0.0.1; 192.168.1.1; };
        allow-query       { any; };
        .
        .
        .
}
include "/var/lib/samba/private/named.conf";

[root@centos ~]# systemctl start named && systemctl enable named

[root@centos ~]# rm -rf /etc/krb5.conf
[root@centos ~]# cp -rf /var/lib/samba/private/krb5.conf /etc/krb5.conf

[root@centos ~]# kinit administrator
[root@centos ~]# klist

[root@centos ~]# firewall-cmd --add-port={389/tcp,636/tcp,1024/tcp,3268/tcp,3269/tcp,135/tcp,88/tcp,464/tcp} --permanent
[root@centos ~]# firewall-cmd --add-port={53/tcp,53/udp} --permanent
[root@centos ~]# firewall-cmd --reload
[root@centos ~]# setenforce 0

• با استفاده از کامند samba-tool
• از طریق RSAT

نویسنده : احسان هدایتی