Difference between revisions of "Samba4 BDC"

From Stadm
Jump to navigationJump to search
Line 17: Line 17:
 
*type password then klist to check if you have ticket
 
*type password then klist to check if you have ticket
 
  klsit
 
  klsit
==Provision BDC==
+
 
 +
==Join DC to domain==
 +
*if kerberos is working check that you can see the PDC dns entries
 +
*then join DC to domain
 +
samba-tool domain join example.edu DC -Uadministrator --realm=example.edu
 +
*should end with
 +
Joined domain EXAMPLE (SID ...) as a DC

Revision as of 09:48, 24 June 2014


Required Packages

Kerberos

  • make backup of kerberos conf
cp /etc/krb5.conf /etc/krb5.bak
  • add realm to kerberos file /etc/krb5.conf
cp /usr/local/samba/share/setup/krb5.conf /etc/krb5.conf
  • change ${REALM} variable to your realm
  • test that you can kinit
kinit administrator
  • type password then klist to check if you have ticket
klsit

Join DC to domain

  • if kerberos is working check that you can see the PDC dns entries
  • then join DC to domain
samba-tool domain join example.edu DC -Uadministrator --realm=example.edu
  • should end with
Joined domain EXAMPLE (SID ...) as a DC