Samba как PDC

Вот наконец-то понадобилось мне поднять контроллер домена... На работе дали задание сделать подобную штуку, причем с наименьшими затратами. ну я долго не выбирая, поставил сервак, поставил FreeBSD 8.1 и samba,у на него. Как это все было расскажу далее... :) Установку фряхи в этой статье рассматривать не буду, так как этот процесс очень хорошо расписан в хэндбуке. А вот про установку и настройку samba,ы в качестве PDC расскажу подробно :).

Итак, обновляем порты удобным для вас способом, я лично обновляю их тулзой portsnap.

# portsnap fetch update

После обновления лезем в порты ставить самбу.

# cd /usr/ports/net/samba34
# make install clean

Из предложенных опций я выбрал следующие:

  • ACL_SUPPORT
  • QUOTAS
  • POPT

Дожидаемся завершения установки и идем править конфиг самбы. У меня он получился такого содержания:

#======================= Global Settings =====================================
[global]
  # Имя домена
  workgroup = DUSH-4
  server string = Documents
  # netbios имя компа
  netbios name = srv-data.local

  security = user
  # Разрешаем доступ только из внутренней сети
  hosts allow = 192.168.7. 127.
  # Принтеры мне не нужны, так что я их отключил
  load printers = no
  printing = bsd
  #guest account = nobody
  # Логи мне нужны только для отладки, после завершения настройки я их отключаю, так работает быстрее
  ;log file = /var/log/samba34/log.%m
  log file = /dev/null
  log level = 0
  max log size = 50
  encrypt passwords = yes
  passdb backend = tdbsam

  ;include = /usr/local/etc/smb.conf.%m

  # Некоторые оптимизации
  ;wide links = yes
  read raw = yes
  write raw = yes
  use sendfile = yes
  ;write cache size = 524288
  ;oplocks = yes
  ;dead time = 15
  ;getwd cache = yes
  max xmit = 65535
  socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=32768 SO_RCVBUF=32768 SO_KEEPALIVE

  # Так же для дополнительной защиты привязываем сервисы самбы на нужные интерфейсы
  interfaces = 192.168.7.250/24 127.0.0.1/8
  bind interfaces only = yes
  local master = yes
  domain master = yes
  preferred master = yes

  os level = 65
  # Делаем самбу контроллером домена
  domain logons = yes
  # Включаем поддержку WINS
  wins support = yes
  # Разрешаем самбе быть сервером времени
  time server = yes

  # Пользователи, которые будут администраторами домена
  admin users = nekit
  # Если вам не нужны перемещаемые профили, то оставьте этот параметр пустым
  logon path = \\%L\profiles\%U
  # Подключаем хомяк пользователя
  logon drive = H:
  logon home = \\%L\%U
  # Скрипт выполняемый при входе пользователя в домен
  ;logon script = logon.cmd

  display charset = koi8-r
  unix charset = koi8-r
  dos charset = cp866

  store dos attributes = yes
  case sensitive = no

  # Скрипты для работы с машинами, пользователями и группами
  # Если со всем будете работать вручную, то закомментируйте
  #add machine script = /usr/local/bin/ldapaddmachine '%u' computers
  #add user script = /usr/local/bin/ldapadduser '%u' people
  #add group script = /usr/local/bin/ldapaddgroup '%g'
  #add user to group script = /usr/local/bin/ldapaddusertogroup '%u' '%g'
  #delete user script = /usr/local/bin/ldapdeleteuser '%u'
  #delete group script = /usr/local/bin/ldapdeletegroup '%g'
  #delete user from group script = /usr/local/bin/ldapdeleteuserfromgroup '%u' '%g'
  #set primary group script = /usr/local/bin/ldapsetprimarygroup '%u' '%g'
  #rename user script = /usr/local/bin/ldaprenameuser '%uold' '%unew'

#============================ Share Definitions ==============================
# Шара со скриптами
[netlogon]
  comment = Netlogon Service
  path = /mnt/media/samba/netlogon
  read only = yes
  browseable = no
  public = no

# Здесь хранятся перемещаемые профили пользователей
[profiles]
  comment = User profiles
  path = /mnt/media/samba/profiles
  writeable = yes
  browseable = no
  public = no
  csc policy = disable   # отключаем автономное кеширование
  create mask = 0600
  directory mask = 0700

[homes]
  comment = Home Directories
  browseable = no
  writable = yes
  force create mode = 0640
  force directory mode = 0750

[distrib]
  comment = Distrib
  path = /mnt/media/samba/distrib
  public = no
  writable = yes
  force create mode = 0640
  force directory mode = 0750
  force user = smb_user
  force group = smb_write
  valid users = @smb_read
  read list = @smb_read
  write list = @smb_write

[temp]
  comment = Temporary files
  path = /mnt/media/samba/temp
  public = no
  writable = yes
  force create mode = 0640
  force directory mode = 0750
  force user = smb_user
  force group = smb_write
  valid users = @smb_read
  read list = @smb_read
  write list = @smb_read

Конфиг достаточно хорошо прокомментирован, так что дополнять ничего не буду. После правки конфига добавляем группы и пользователей, которым будут сопоставлены группы Windows NT.

# pw groupadd -n pdc_admins -g 10001
# pw groupadd -n pdc_users -g 10002
# pw groupadd -n pdc_computers -g 10003
# pw groupadd -n pdc_guests -g 10004

Далее создаем пользователя (администратора домена) и добавляем в нужную группу.

# pw group add nekit
# pw useradd nekit -g nekit -s /bin/csh -d /home/nekit -L russian -G pdc_admins

Также надо сделать сопоставление Windows NT групп группам Unix

# net groupmap add rid=512 unixgroup=pdc_admins type=domain ntgroup="Domain Admins"
# net groupmap add rid=513 unixgroup=pdc_users type=domain ntgroup="Domain Users"
# net groupmap add rid=514 unixgroup=pdc_guests type=domain ntgroup="Domain Guests"
# net groupmap add rid=515 unixgroup=pdc_computers type=domain ntgroup="Domain Computers"

Проверим, что получилось, должно быть примерно следующее:

# net groupmap list
Domain Admins (S-1-5-21-1729013427-4292848044-4196762361-512) -> pdc_admins
Domain Computers (S-1-5-21-1729013427-4292848044-4196762361-515) -> pdc_computers
Domain Users (S-1-5-21-1729013427-4292848044-4196762361-513) -> pdc_users
Domain Guests (S-1-5-21-1729013427-4292848044-4196762361-514) -> pdc_guests

Теперь можно запустить самбу.

# echo 'smbd_enable="YES"' >> /etc/rc.conf
# echo 'nmbd_enable="YES"' >> /etc/rc.conf
# service samba start

Добавляем созданного ранее пользователя в хранилище самбы

# pdbedit -a nekit
New password: ***
Retype new password: ***
User added...

Еще нужно добавить машины которые будут вводиться в домен. Они добавляются как пользователи, только на конце еще к имени машины добавляется знак $.

# pw useradd srv-data.local$ -g pdc_computers -s /usr/sbin/nologin -d /nonexistent

Теперь можно ввести локальную машину в домен

# net rpc join -U nekit
Password: ***
Added...

Теперь можно посмотреть информацию о домене.

# net rpc info -U nekit
Enter nekit's password:
Domain Name: DUSH-4
Domain SID: S-1-5-21-1729013427-4292848044-4196762361
Sequence number: 1289023023
Num users: 3
Num domain groups: 4
Num local groups: 0

Все готово. Чтобы включить виндовые машины в домен нужно сделать следующее: Панель управления -> Система -> Вкладка: имя компьютера -> Изменить. Там ставите переключатель на пункт "Является членом домена" и вводите свой домен. Винда запросит пароль администратора, введете, и все, ваша машина включена в домен, перезагружаемся и пользуемся.

Гость (не проверено)

https://goodnights.in


https://achalpur.goodnights.in


https://adoni.goodnights.in


https://agartala.goodnights.in


https://agra.goodnights.in


https://ahmedabad.goodnights.in


https://ahmednagar.goodnights.in


https://aizawl.goodnights.in


https://ajmer.goodnights.in


https://akola.goodnights.in


https://alappuzha.goodnights.in


https://aligarh.goodnights.in


https://alwar.goodnights.in


https://amaravati.goodnights.in


https://ambala.goodnights.in


https://ambarnath.goodnights.in


https://ambattur.goodnights.in


https://amravati.goodnights.in


https://amritsar.goodnights.in


https://amroha.goodnights.in


https://anand.goodnights.in


https://anantapur.goodnights.in


https://arrah.goodnights.in


https://asansol.goodnights.in


https://aurangabad.goodnights.in


https://avadi.goodnights.in


https://badlapur.goodnights.in


https://bagaha.goodnights.in


https://baharampur.goodnights.in


https://bahraich.goodnights.in


https://bally.goodnights.in


https://baranagar.goodnights.in


https://barasat.goodnights.in


https://bardhaman.goodnights.in


https://bareilly.goodnights.in


https://barshi.goodnights.in


https://bathinda.goodnights.in


https://beed.goodnights.in


https://begusarai.goodnights.in


https://belgaum.goodnights.in


https://bellary.goodnights.in


https://bengaluru.goodnights.in


https://berhampur.goodnights.in


https://bettiah.goodnights.in


https://bhagalpur.goodnights.in


https://bhalswa-jahangir-pur.goodnights.in


https://bharatpur.goodnights.in


https://bhatpara.goodnights.in


https://bhavnagar.goodnights.in


https://bhilai.goodnights.in


https://bhilwara.goodnights.in


https://bhimavaram.goodnights.in


https://bhind.goodnights.in


https://bhiwandi.goodnights.in


https://bhiwani.goodnights.in


https://bhopal.goodnights.in


https://bhubaneswar.goodnights.in


https://bhusawal.goodnights.in


https://bidar.goodnights.in


https://bidhan-nagar.goodnights.in


https://bihar-sharif.goodnights.in


https://bijapur.goodnights.in


https://bikaner.goodnights.in


https://bilaspur.goodnights.in


https://bokaro.goodnights.in


https://bulandshahr.goodnights.in


https://burhanpur.goodnights.in


https://buxar.goodnights.in


https://chandigarh.goodnights.in


https://chandrapur.goodnights.in


https://chapra.goodnights.in


https://chennai.goodnights.in


https://chittoor.goodnights.in


https://coimbatore.goodnights.in


https://cuttack.goodnights.in


https://daman.goodnights.in


https://danapur.goodnights.in


https://darbhanga.goodnights.in


https://davanagere.goodnights.in


https://dehradun.goodnights.in


https://dehri.goodnights.in


https://delhi.goodnights.in


https://deoghar.goodnights.in


https://dewas.goodnights.in


https://dhanbad.goodnights.in


https://dharmavaram.goodnights.in


https://dharwad.goodnights.in


https://dhule.goodnights.in


https://dibrugarh.goodnights.in


https://digha.goodnights.in


https://dindigul.goodnights.in


https://dombivli.goodnights.in


https://durg.goodnights.in


https://durgapur.goodnights.in


https://eluru.goodnights.in


https://erode.goodnights.in


https://etawah.goodnights.in


https://faridabad.goodnights.in


https://farrukhabad.goodnights.in


https://fatehpur.goodnights.in


https://firozabad.goodnights.in


https://gadag-betageri.goodnights.in


https://gandhidham.goodnights.in


https://gandhinagar.goodnights.in


https://gaya.goodnights.in


https://ghaziabad.goodnights.in


https://goa.goodnights.in


https://gondia.goodnights.in


https://gopalpur.goodnights.in


https://gorakhpur.goodnights.in


https://gudivada.goodnights.in


https://gulbarga.goodnights.in


https://guna.goodnights.in


https://guntakal.goodnights.in


https://guntur.goodnights.in


https://gurgaon.goodnights.in


https://guwahati.goodnights.in


https://gwalior.goodnights.in


https://hajipur.goodnights.in


https://haldia.goodnights.in


https://haldwani.goodnights.in


https://hapur.goodnights.in


https://haridwar.goodnights.in


https://hindupur.goodnights.in


https://hinganghat.goodnights.in


https://hospet.goodnights.in


https://howrah.goodnights.in


https://hubli.goodnights.in


https://hugli-chuchura.goodnights.in


https://hyderabad.goodnights.in


https://ichalkaranji.goodnights.in


https://imphal.goodnights.in


https://indore.goodnights.in


https://jabalpur.goodnights.in


https://jaipur.goodnights.in


https://jalandhar.goodnights.in


https://jalgaon.goodnights.in


https://jalna.goodnights.in


https://jamalpur.goodnights.in


https://jammu.goodnights.in


https://jamnagar.goodnights.in


https://jamshedpur.goodnights.in


https://jaunpur.goodnights.in


https://jehanabad.goodnights.in


https://jhansi.goodnights.in


https://jodhpur.goodnights.in


https://jorhat.goodnights.in


https://junagadh.goodnights.in


https://kadapa.goodnights.in


https://kakinada.goodnights.in


https://kalyan.goodnights.in


https://kamarhati.goodnights.in


https://kanpur.goodnights.in


https://karaikudi.goodnights.in


https://karawal-nagar.goodnights.in


https://karimnagar.goodnights.in


https://karnal.goodnights.in


https://katihar.goodnights.in


https://kavali.goodnights.in


https://khammam.goodnights.in


https://khandwa.goodnights.in


https://kharagpur.goodnights.in


https://khora.goodnights.in


https://kirari-suleman-nagar.goodnights.in


https://kishanganj.goodnights.in


https://kochi.goodnights.in


https://kolhapur.goodnights.in


https://kolkata.goodnights.in


https://kollam.goodnights.in


https://korba.goodnights.in


https://kota.goodnights.in


https://kottayam.goodnights.in


https://kozhikode.goodnights.in


https://kulti.goodnights.in


https://kupwad.goodnights.in


https://kurnool.goodnights.in


https://latur.goodnights.in


https://loni.goodnights.in


https://lucknow.goodnights.in


https://ludhiana.goodnights.in


https://machilipatnam.goodnights.in


https://madanapalle.goodnights.in


https://madhyamgram.goodnights.in


https://madurai.goodnights.in


https://mahesana.goodnights.in


https://maheshtala.goodnights.in


https://malda.goodnights.in


https://malegaon.goodnights.in


https://manali.goodnights.in


https://mangalore.goodnights.in


https://mango.goodnights.in


https://mathura.goodnights.in


https://mau.goodnights.in


https://meerut.goodnights.in


https://mira-bhayandar.goodnights.in


https://miraj.goodnights.in


https://miryalaguda.goodnights.in


https://mirzapur.goodnights.in


https://moradabad.goodnights.in


https://morena.goodnights.in


https://morvi.goodnights.in


https://motihari.goodnights.in


https://mount-abu.goodnights.in


https://mumbai.goodnights.in


https://munger.goodnights.in


https://murwara.goodnights.in


https://mussoorie.goodnights.in


https://muzaffarnagar.goodnights.in


https://muzaffarpur.goodnights.in


https://mysore.goodnights.in


https://nadiad.goodnights.in


https://nagarcoil.goodnights.in


https://nagpur.goodnights.in


https://naihati.goodnights.in


https://nainital.goodnights.in


https://nanded.goodnights.in


https://nandurbar.goodnights.in


https://nandyal.goodnights.in


https://nangloi-jat.goodnights.in


https://narasaraopet.goodnights.in


https://nashik.goodnights.in


https://navi-mumbai.goodnights.in


https://nellore.goodnights.in


https://new-delhi.goodnights.in


https://nizamabad.goodnights.in


https://noida.goodnights.in


https://north-dumdum.goodnights.in


https://ongole.goodnights.in


https://ooty.goodnights.in


https://orai.goodnights.in


https://osmanabad.goodnights.in


https://ozhukarai.goodnights.in


https://pali.goodnights.in


https://pallavaram.goodnights.in


https://panchkula.goodnights.in


https://panihati.goodnights.in


https://panipat.goodnights.in


https://panvel.goodnights.in


https://parbhani.goodnights.in


https://patiala.goodnights.in


https://patna.goodnights.in


https://pimpri-chinchwad.goodnights.in


https://prayagraj.goodnights.in


https://proddatur.goodnights.in


https://puducherry.goodnights.in


https://pune.goodnights.in


https://puri.goodnights.in


https://purnia.goodnights.in


https://rae-bareli.goodnights.in


https://raichur.goodnights.in


https://raiganj.goodnights.in


https://raipur.goodnights.in


https://rajahmundry.goodnights.in


https://rajkot.goodnights.in


https://rajpur.goodnights.in


https://ramagundam.goodnights.in


https://ramnagar.goodnights.in


https://rampur.goodnights.in


https://ranchi.goodnights.in


https://ranikhet.goodnights.in


https://ratlam.goodnights.in


https://raurkela.goodnights.in


https://rewa.goodnights.in


https://rishikesh.goodnights.in


https://rohtak.goodnights.in


https://roorkee.goodnights.in


https://rourkela.goodnights.in


https://rudrapur.goodnights.in


https://sagar.goodnights.in


https://saharanpur.goodnights.in


https://saharsa.goodnights.in


https://salem.goodnights.in


https://sambalpur.goodnights.in


https://sambhal.goodnights.in


https://sangli.goodnights.in


https://sasaram.goodnights.in


https://satara.goodnights.in


https://satna.goodnights.in


https://secunderabad.goodnights.in


https://serampore.goodnights.in


https://shahjahanpur.goodnights.in


https://shimla.goodnights.in


https://shirdi.goodnights.in


https://shivamogga.goodnights.in


https://shivpuri.goodnights.in


https://sikar.goodnights.in


https://silchar.goodnights.in


https://siliguri.goodnights.in


https://silvassa.goodnights.in


https://singrauli.goodnights.in


https://sirsa.goodnights.in


https://siwan.goodnights.in


https://solapur.goodnights.in


https://sonarpur.goodnights.in


https://sonipat.goodnights.in


https://south-dumdum.goodnights.in


https://sri-ganganagar.goodnights.in


https://srikakulam.goodnights.in


https://srinagar.goodnights.in


https://sultan-pur-majra.goodnights.in


https://surat.goodnights.in


https://surendranagar-dudhrej.goodnights.in


https://suryapet.goodnights.in


https://tadepalligudem.goodnights.in


https://tadipatri.goodnights.in


https://tenali.goodnights.in


https://tezpur.goodnights.in


https://thane.goodnights.in


https://thanjavur.goodnights.in


https://thiruvananthapuram.goodnights.in


https://thoothukudi.goodnights.in


https://thrissur.goodnights.in


https://tinsukia.goodnights.in


https://tiruchirappalli.goodnights.in


https://tirunelveli.goodnights.in


https://tirupati.goodnights.in


https://tiruppur.goodnights.in


https://tiruvottiyur.goodnights.in


https://tumkur.goodnights.in


https://udaipur.goodnights.in


https://udgir.goodnights.in


https://ujjain.goodnights.in


https://ulhasnagar.goodnights.in


https://uluberia.goodnights.in


https://unnao.goodnights.in


https://vadodara.goodnights.in


https://varanasi.goodnights.in


https://vasai.goodnights.in


https://vellore.goodnights.in


https://vijayanagaram.goodnights.in


https://vijayawada.goodnights.in


https://virar.goodnights.in


https://visakhapatnam.goodnights.in


https://vrindavan.goodnights.in


https://warangal.goodnights.in


https://wardha.goodnights.in


https://yamunanagar.goodnights.in


https://yavatmal.goodnights.in


https://south-goa.goodnights.in


https://north-goa.goodnights.in





Feel free to surf to my homepage Call Girls India

Добавить комментарий

CAPTCHA
Этот вопрос задается для того, чтобы выяснить, являетесь ли Вы человеком или представляете из себя автоматическую спам-рассылку.
Яндекс.Метрика