This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
контроллер_домена_samba_4 [2024/01/25 06:56] val [Настройка репликации] |
контроллер_домена_samba_4 [2024/06/01 07:34] (current) val [Настройка контроллером существующего домена] |
||
---|---|---|---|
Line 10: | Line 10: | ||
==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
<code> | <code> | ||
+ | # apt update | ||
+ | |||
# apt install samba winbind | # apt install samba winbind | ||
Line 42: | Line 44: | ||
debian# systemctl disable smbd | debian# systemctl disable smbd | ||
- | debian# systemctl unmask samba-ad-dc.service | + | debian# systemctl unmask samba-ad-dc.service # в debian12, похоже, не нужно |
- | debian# systemctl enable samba-ad-dc.service | + | debian# systemctl enable samba-ad-dc.service # в debian12, похоже, не нужно |
server# cat /etc/samba/smb.conf | server# cat /etc/samba/smb.conf | ||
Line 53: | Line 55: | ||
</code><code> | </code><code> | ||
server# init 6 | server# init 6 | ||
+ | |||
+ | gate# ssh server2 | ||
server# cat /etc/resolv.conf | server# cat /etc/resolv.conf | ||
Line 74: | Line 78: | ||
# samba-tool user list | # samba-tool user list | ||
+ | |||
+ | # samba-tool group addmembers group1 user4 | ||
</code> | </code> | ||
Line 103: | Line 109: | ||
* [[https://www.rebeladmin.com/2016/01/step-by-step-guide-to-downgrade-domain-and-forest-functional-level/|Step by Step Guide to downgrade domain and forest functional level]] | * [[https://www.rebeladmin.com/2016/01/step-by-step-guide-to-downgrade-domain-and-forest-functional-level/|Step by Step Guide to downgrade domain and forest functional level]] | ||
+ | * [[https://dzen.ru/a/Y0LrkjKfFBoi30Pi|Миграция Active Directory с Windows Server 2022 на Ubuntu 22.04 + Samba 4.15.13]] | ||
<code> | <code> | ||
Line 131: | Line 138: | ||
<code> | <code> | ||
server2# samba-tool drs showrepl | server2# samba-tool drs showrepl | ||
- | debian12 ошибки | ||
server2# samba-tool user list | server2# samba-tool user list | ||
Line 138: | Line 144: | ||
В AD появится с задержкой до 10 минут | В AD появится с задержкой до 10 минут | ||
- | server2# ### samba-tool ldapcmp ldap://server.corpX.un ldap://server2.corpX.un -Uadministrator | + | server2# samba-tool ldapcmp ldap://server.corpX.un ldap://server2.corpX.un -Uadministrator |
- | debian12 ошибки | + | |
Допустимы ERROR, но должны быть и SUCCESS | Допустимы ERROR, но должны быть и SUCCESS | ||
Line 182: | Line 187: | ||
server2# samba-tool fsmo seize --role=domaindns | server2# samba-tool fsmo seize --role=domaindns | ||
- | server2# samba-tool fsmo show | + | server2# samba-tool fsmo show | grep SERVER2 |
</code> | </code> | ||
Line 192: | Line 197: | ||
* Останавливаем SERVER | * Останавливаем SERVER | ||
<code> | <code> | ||
- | server2# nslookup -q=SRV _kerberos._tcp.corp13.un | + | server2# nslookup -q=SRV _kerberos._tcp.corpX.un |
server2# samba-tool domain demote --remove-other-dead-server=SERVER | server2# samba-tool domain demote --remove-other-dead-server=SERVER | ||
- | server2# nslookup -q=SRV _kerberos._tcp.corp13.un | + | server2# nslookup -q=SRV _kerberos._tcp.corpX.un |
</code> | </code> | ||