109 lines
2.7 KiB
Plaintext
109 lines
2.7 KiB
Plaintext
# Samba DC
|
|
|
|
apt-get install task-samba-dc chrony -y
|
|
control chrony server
|
|
systemctl enable --now chronyd
|
|
|
|
for service in smb nmb krb5kdc slapd bind; do systemctl disable $service; systemctl stop $service; done
|
|
hostnamectl set-hostname dc.test.alt
|
|
domainname test.alt
|
|
echo name_servers=127.0.0.1 >> /etc/resolvconf.conf
|
|
echo search_domains=test.alt >> /etc/resolvconf.conf
|
|
resolvconf -u
|
|
rm -f /etc/samba/smb.conf
|
|
rm -rf /var/lib/samba
|
|
rm -rf /var/cache/samba
|
|
mkdir -p /var/lib/samba/sysvol
|
|
|
|
samba-tool domain provision --realm=test.alt --domain=test --adminpass='P@ssw0rd' --dns-backend=SAMBA_INTERNAL --option="dns forwarder=77.88.8.8" --server-role=dc --use-rfc2307
|
|
|
|
systemctl enable --now samba
|
|
cp /var/lib/samba/private/krb5.conf /etc/krb5.conf
|
|
|
|
samba-tool domain info 127.0.0.1 --password=P@ssw0rd
|
|
|
|
smbclient -L localhost -Uadministrator
|
|
|
|
kinit administrator
|
|
klist
|
|
|
|
samba-tool user create ivanov 'P@ssw0rd' --given-name='Иван Иванов' --mail-address='ivanov@test.alt'
|
|
samba-tool user setexpiry ivanov --noexpiry
|
|
|
|
###########
|
|
|
|
# NFS сервер - этап 1
|
|
|
|
echo name_servers=10.1.4.10 >> /etc/resolvconf.conf
|
|
echo search_domains=test.alt >> /etc/resolvconf.conf
|
|
resolvconf -u
|
|
hostnamectl set-hostname nas.test.alt
|
|
|
|
|
|
apt-get install task-auth-ad-sssd -y
|
|
system-auth write ad test.alt nas test 'administrator' 'P@ssw0rd'
|
|
|
|
reboot
|
|
|
|
###########
|
|
|
|
# DNS
|
|
|
|
samba-tool dns zonecreate 127.0.0.1 4.1.10.in-addr.arpa -Uadministrator --password=P@ssw0rd
|
|
|
|
samba-tool dns add 127.0.0.1 4.1.10.in-addr.arpa 10 PTR dc.test.alt -Uadministrator --password=P@ssw0rd
|
|
|
|
samba-tool dns add 127.0.0.1 4.1.10.in-addr.arpa 12 PTR ws.test.alt -Uadministrator --password=P@ssw0rd
|
|
|
|
samba-tool dns add 127.0.0.1 4.1.10.in-addr.arpa 11 PTR nas.test.alt -Uadministrator --password=P@ssw0rd
|
|
|
|
###########
|
|
|
|
# NFS сервер - этап 2
|
|
|
|
apt-get install nfs-server -y
|
|
systemctl enable --now nfs-server
|
|
|
|
vim /etc/idmapd.conf
|
|
|
|
[General]
|
|
Domain = test.alt
|
|
Local-Realms = TEST.ALT
|
|
|
|
[Translation]
|
|
Method = nsswitch,static
|
|
GSS-Methods = nsswitch,static
|
|
|
|
mkdir -p /share/nfs_share/testdir
|
|
chgrp 'Domain Users' /share/nfs_share/
|
|
chmod g+w /share/nfs_share/
|
|
|
|
echo "/share/nfs_share/ *(rw,sync,no_subtree_check,sec=krb5:krb5i:krb5p)" > /etc/exports
|
|
|
|
exportfs -vra
|
|
|
|
kinit administrator@TEST.ALT
|
|
adcli update --service-name=nfs
|
|
systemctl restart nfs-server
|
|
|
|
###########
|
|
|
|
# NFS Client
|
|
|
|
echo name_servers=10.1.4.10 >> /etc/resolvconf.conf
|
|
echo search_domains=test.alt >> /etc/resolvconf.conf
|
|
resolvconf -u
|
|
hostnamectl set-hostname ws.test.alt
|
|
|
|
|
|
apt-get install task-auth-ad-sssd -y
|
|
system-auth write ad test.alt ws test 'administrator' 'P@ssw0rd'
|
|
|
|
reboot
|
|
|
|
systemctl enable --now nfs-client.target
|
|
|
|
mkdir /mnt/nfs
|
|
|
|
mount.nfs4 -vvv -o sec=krb5:krb5i:krb5p,rw nas.test.alt://share/nfs_share/ /mnt/nfs/
|