User Tools

Site Tools


контроллер_домена_samba_4

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Last revision Both sides next revision
контроллер_домена_samba_4 [2023/04/03 08:41]
val [Настройка репликации]
контроллер_домена_samba_4 [2024/01/25 08:45]
val [Удаляем старый сервер]
Line 88: Line 88:
  
 # samba-tool dns add server corpX.un _xmpp-client._tcp SRV '​gate.corpX.un 5222 0 0' # samba-tool dns add server corpX.un _xmpp-client._tcp SRV '​gate.corpX.un 5222 0 0'
 +
 +# samba-tool dns add server corpX.un @ MX "​server.corpX.un 1"
 </​code>​ </​code>​
  
Line 106: Line 108:
 PS C:​\Users\Administrator>​ Get-ADDomain PS C:​\Users\Administrator>​ Get-ADDomain
  
-PS C:​\Users\Administrator>​ Set-ADForestMode –Identity "corp13.un" -ForestMode Windows2008R2Forest+PS C:​\Users\Administrator>​ Set-ADForestMode –Identity "corpX.un" -ForestMode Windows2008R2Forest
  
-PS C:​\Users\Administrator>​ Set-ADDomainMode –Identity "corp13.un" –DomainMode Windows2008R2Domain+PS C:​\Users\Administrator>​ Set-ADDomainMode –Identity "corpX.un" –DomainMode Windows2008R2Domain
 </​code>​ </​code>​
  
Line 114: Line 116:
  
 <​code>​ <​code>​
-server2.corp13.un:​~# kinit administrator+server2# kinit administrator
  
-server2.corp13.un:​~# samba-tool domain join corp13.un DC -k yes --dns-backend=SAMBA_INTERNAL --option="​dns forwarder=172.16.1.254"​+server2# samba-tool domain join corpX.un DC -k yes --dns-backend=SAMBA_INTERNAL --option="​dns forwarder=172.16.1.254"​
 </​code>​ </​code>​
  
Line 124: Line 126:
  
   * [[https://​learn.microsoft.com/​en-us/​openspecs/​windows_protocols/​ms-drsr/​f977faaa-673e-4f66-b9bf-48c640241d47|[MS-DRSR]:​ Directory Replication Service (DRS) Remote Protocol]]   * [[https://​learn.microsoft.com/​en-us/​openspecs/​windows_protocols/​ms-drsr/​f977faaa-673e-4f66-b9bf-48c640241d47|[MS-DRSR]:​ Directory Replication Service (DRS) Remote Protocol]]
 +  * [[https://​wiki.samba.org/​index.php/​SysVol_replication_(DFS-R)|SysVol replication (DFS-R)]]
   * [[https://​wiki.samba.org/​index.php/​Robocopy_based_SysVol_replication_workaround|Robocopy based SysVol replication workaround]]   * [[https://​wiki.samba.org/​index.php/​Robocopy_based_SysVol_replication_workaround|Robocopy based SysVol replication workaround]]
  
 <​code>​ <​code>​
-server2.corp13.un:​~# samba-tool drs showrepl+server2# samba-tool drs showrepl 
 +debian12 ошибки
  
-server2.corp13.un:​~# samba-tool user list+server2# samba-tool user list
  
-server2.corp13.un:​~# samba-tool user create user4 '​Pa$$w0rd4'​ --given-name '​Василий'​ --initials '​М'​ --surname '​Кошкин'​+server2# samba-tool user create user4 '​Pa$$w0rd4'​ --given-name '​Василий'​ --initials '​М'​ --surname '​Кошкин'​
 В AD появится с задержкой до 10 минут В AD появится с задержкой до 10 минут
  
-server2.corp13.un:​~#### samba-tool ldapcmp ldap://​server.corp13.un ldap://​server2.corp13.un -Uadministrator+server2# ### samba-tool ldapcmp ldap://​server.corpX.un ldap://​server2.corpX.un -Uadministrator 
 +debian12 ошибки
 Допустимы ERROR, но должны быть и SUCCESS Допустимы ERROR, но должны быть и SUCCESS
  
-server2.corp13.un:​~# find /​var/​lib/​samba/​sysvol +server2# find /​var/​lib/​samba/​sysvol 
-PS C:​\Users\Administrator>​ robocopy \\SERVER\SYSVOL\corp13.un\ \\SERVER2\SYSVOL\corp13.un\ /mir /sec +PS C:​\Users\Administrator>​ robocopy \\SERVER\SYSVOL\corpX.un\ \\SERVER2\SYSVOL\corpX.un\ /mir /sec 
-server2.corp13.un:​~# find /​var/​lib/​samba/​sysvol | grep aas+server2# find /​var/​lib/​samba/​sysvol | grep aas
  
-server2.corp13.un:​~#### samba-tool ntacl sysvolcheck+server2# ### samba-tool ntacl sysvolcheck
 ошибки ошибки
 </​code>​ </​code>​
Line 156: Line 161:
  
 <​code>​ <​code>​
-server2.corp13.un:​~# samba-tool fsmo show+server2# samba-tool fsmo show
 </​code>​ </​code>​
 <​code>​ <​code>​
Line 173: Line 178:
 q q
 </​code><​code>​ </​code><​code>​
-server2.corp13.un:​~# samba-tool fsmo seize --role=forestdns+server2# samba-tool fsmo seize --role=forestdns
  
-server2.corp13.un:​~# samba-tool fsmo seize --role=domaindns+server2# samba-tool fsmo seize --role=domaindns
  
-server2.corp13.un:​~# samba-tool fsmo show+server2# samba-tool fsmo show
 </​code>​ </​code>​
  
Line 187: Line 192:
   * Останавливаем SERVER   * Останавливаем SERVER
 <​code>​ <​code>​
-server2# nslookup -q=SRV _kerberos._tcp.corp13.un+server2# nslookup -q=SRV _kerberos._tcp.corpX.un
  
 server2# samba-tool domain demote --remove-other-dead-server=SERVER server2# samba-tool domain demote --remove-other-dead-server=SERVER
  
-server2# nslookup -q=SRV _kerberos._tcp.corp13.un+server2# nslookup -q=SRV _kerberos._tcp.corpX.un
 </​code>​ </​code>​
  
  
контроллер_домена_samba_4.txt · Last modified: 2024/03/29 11:54 by val