User Tools

Site Tools


контроллер_домена_samba_4

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
контроллер_домена_samba_4 [2023/04/03 07:34]
val [Настройка репликации]
контроллер_домена_samba_4 [2024/03/29 11:54]
val [Запуск сервиса]
Line 53: Line 53:
 </​code><​code>​ </​code><​code>​
 server# init 6 server# init 6
 +
 +gate# ssh server2
  
 server# cat /​etc/​resolv.conf server# cat /​etc/​resolv.conf
Line 88: Line 90:
  
 # samba-tool dns add server corpX.un _xmpp-client._tcp SRV '​gate.corpX.un 5222 0 0' # samba-tool dns add server corpX.un _xmpp-client._tcp SRV '​gate.corpX.un 5222 0 0'
 +
 +# samba-tool dns add server corpX.un @ MX "​server.corpX.un 1"
 </​code>​ </​code>​
  
Line 106: Line 110:
 PS C:​\Users\Administrator>​ Get-ADDomain PS C:​\Users\Administrator>​ Get-ADDomain
  
-PS C:​\Users\Administrator>​ Set-ADForestMode –Identity "corp13.un" -ForestMode Windows2008R2Forest+PS C:​\Users\Administrator>​ Set-ADForestMode –Identity "corpX.un" -ForestMode Windows2008R2Forest
  
-PS C:​\Users\Administrator>​ Set-ADDomainMode –Identity "corp13.un" –DomainMode Windows2008R2Domain+PS C:​\Users\Administrator>​ Set-ADDomainMode –Identity "corpX.un" –DomainMode Windows2008R2Domain
 </​code>​ </​code>​
  
Line 114: Line 118:
  
 <​code>​ <​code>​
-server2.corp13.un:​~# kinit administrator+server2# kinit administrator
  
-server2.corp13.un:​~# samba-tool domain join corp13.un DC -k yes --dns-backend=SAMBA_INTERNAL --option="​dns forwarder=172.16.1.254"​+server2# samba-tool domain join corpX.un DC -k yes --dns-backend=SAMBA_INTERNAL --option="​dns forwarder=172.16.1.254"​
 </​code>​ </​code>​
  
Line 124: Line 128:
  
   * [[https://​learn.microsoft.com/​en-us/​openspecs/​windows_protocols/​ms-drsr/​f977faaa-673e-4f66-b9bf-48c640241d47|[MS-DRSR]:​ Directory Replication Service (DRS) Remote Protocol]]   * [[https://​learn.microsoft.com/​en-us/​openspecs/​windows_protocols/​ms-drsr/​f977faaa-673e-4f66-b9bf-48c640241d47|[MS-DRSR]:​ Directory Replication Service (DRS) Remote Protocol]]
 +  * [[https://​wiki.samba.org/​index.php/​SysVol_replication_(DFS-R)|SysVol replication (DFS-R)]]
 +  * [[https://​wiki.samba.org/​index.php/​Robocopy_based_SysVol_replication_workaround|Robocopy based SysVol replication workaround]]
  
 <​code>​ <​code>​
-server2.corp13.un:​~# samba-tool drs showrepl+server2# samba-tool drs showrepl 
 +debian12 ошибки
  
-server2.corp13.un:​~# samba-tool user list+server2# samba-tool user list
  
-server2.corp13.un:​~# samba-tool user create user4 '​Pa$$w0rd4'​ --given-name '​Василий'​ --initials '​М'​ --surname '​Кошкин'​+server2# samba-tool user create user4 '​Pa$$w0rd4'​ --given-name '​Василий'​ --initials '​М'​ --surname '​Кошкин'​
 В AD появится с задержкой до 10 минут В AD появится с задержкой до 10 минут
  
-server2.corp13.un:​~#### samba-tool ldapcmp ldap://​server.corp13.un ldap://​server2.corp13.un -Uadministrator+server2# ### samba-tool ldapcmp ldap://​server.corpX.un ldap://​server2.corpX.un -Uadministrator 
 +debian12 ошибки
 Допустимы ERROR, но должны быть и SUCCESS Допустимы ERROR, но должны быть и SUCCESS
  
-server2.corp13.un:​~# find /​var/​lib/​samba/​sysvol +server2# find /​var/​lib/​samba/​sysvol 
-PS C:​\Users\Administrator>​ robocopy \\SERVER\SYSVOL\corp13.un\ \\SERVER2\SYSVOL\corp13.un\ /mir /sec +PS C:​\Users\Administrator>​ robocopy \\SERVER\SYSVOL\corpX.un\ \\SERVER2\SYSVOL\corpX.un\ /mir /sec 
-server2.corp13.un:​~# find /​var/​lib/​samba/​sysvol | grep aas+server2# find /​var/​lib/​samba/​sysvol | grep aas
  
-server2.corp13.un:​~#### samba-tool ntacl sysvolcheck+server2# ### samba-tool ntacl sysvolcheck
 ошибки ошибки
 </​code>​ </​code>​
Line 155: Line 163:
  
 <​code>​ <​code>​
-server2.corp13.un:​~# samba-tool fsmo show+server2# samba-tool fsmo show
 </​code>​ </​code>​
 <​code>​ <​code>​
Line 172: Line 180:
 q q
 </​code><​code>​ </​code><​code>​
-server2.corp13.un:​~# samba-tool fsmo seize --role=forestdns+server2# samba-tool fsmo seize --role=forestdns
  
-server2.corp13.un:​~# samba-tool fsmo seize --role=domaindns+server2# samba-tool fsmo seize --role=domaindns
  
-server2.corp13.un:​~# samba-tool fsmo show+server2# samba-tool fsmo show
 </​code>​ </​code>​
  
Line 186: Line 194:
   * Останавливаем SERVER   * Останавливаем SERVER
 <​code>​ <​code>​
-server2# nslookup -q=SRV _kerberos._tcp.corp13.un+server2# nslookup -q=SRV _kerberos._tcp.corpX.un
  
 server2# samba-tool domain demote --remove-other-dead-server=SERVER server2# samba-tool domain demote --remove-other-dead-server=SERVER
  
-server2# nslookup -q=SRV _kerberos._tcp.corp13.un+server2# nslookup -q=SRV _kerberos._tcp.corpX.un
 </​code>​ </​code>​
  
  
контроллер_домена_samba_4.txt · Last modified: 2024/06/01 07:34 by val