Solved

Working Samba 4 NT4 style PDC on Centos 7 -  How to upgrade to AD PDC

Posted on 2014-11-22
4
1,017 Views
Last Modified: 2014-12-01
Hi !

I have a working configuration of Samba 4.1.1 on Centos 7. Samba is now configured as an old style NT4 PDC and all works very fine. Now I would like do upgrade the Samba configuration to Active Directory DC server. I have then installed, for this purpose, the Centos 7 packages samba-dc and samba-dc-libs:

Name          : samba-dc
Arch             : x86_64
Version        : 4.1.1
Release       : 37.el7_0
Size              : 964
Repo            : installed
From repo   : sl-security
Summary     : Samba AD Domain Controller
URL               : http://www.samba.org/
License         : GPLv3+ and LGPLv3+
Description : The samba-dc package provides AD Domain Controller functionality

Name           : samba-dc-libs
Arch             : x86_64
Version        : 4.1.1
Release        : 37.el7_0
Size               : 964
Repo             : installed
From repo   : sl-security
Summary     : Samba AD Domain Controller Libraries
URL               : http://www.samba.org/
License         : GPLv3+ and LGPLv3+
Description  : The samba4-dc-libs package contains the libraries needed by the DC to
                         link against the SMB, RPC and other protocols.

My smb.conf looks like this:

Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

[global]
        workgroup = LATTARI
        server string = LATTARI - FILEMON1 PDC
        interfaces = lo, enp3s6
        bind interfaces only = Yes
        log file = /var/log/samba/log.%m
        max log size = 50
        load printers = No
        printcap name = /dev/null
        disable spoolss = Yes
        add user script = /usr/sbin/useradd "%u" -n -g users
        delete user script = /usr/sbin/userdel "%u"
        add group script = /usr/sbin/groupadd "%g"
        delete group script = /usr/sbin/groupdel "%g"
        delete user from group script = /usr/sbin/userdel "%u" "%g"
        add machine script = /usr/sbin/useradd -n -c "Workstation (%u)" -M -d /nohome -s /bin/false "%u"
        logon script = %u.bat
        logon path = \\%L\Profiles\%u
        logon drive = H:
        domain logons = Yes
        os level = 64
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        idmap config * : backend = tdb
        invalid users = apache, bin, daemon, adm, sync, shutdown, halt, mail, news, uucp, operator
        admin users = root, @admin
        hosts allow = 127.0.0.1, 192.168.0.0/24
        printing = bsd
        print command = lpr -r -P'%p' %s
        lpq command = lpq -P'%p'
        lprm command = lprm -P'%p' %j

[homes]
        comment = Home Directories
        valid users = %S
        read only = No
        create mask = 0700
        directory mask = 0700
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        print ok = Yes
        browseable = No

[netlogon]
        comment = Network Logon Service
        path = /var/lib/samba/netlogon

[Profiles]
        path = /home/samba/Profiles
        read only = No
        create mask = 0600
        directory mask = 0700
        profile acls = Yes
        browseable = No


My question is: how to proceed now to configure Samba as AD PDC server using the installed packages?
0
Comment
Question by:Lelio Michele Lattari
  • 3
4 Comments
 
LVL 17

Expert Comment

by:lruiz52
ID: 40460309
Check  out this link below, should help with your samba 4 config

http://www.alexwyn.com/computer-tips/centos-samba4-active-directory-domain-controller
0
 

Author Comment

by:Lelio Michele Lattari
ID: 40461965
Hi! Thank You for the advice. I'am trying this solution but I get package dependency failure.   A package requires libpcre.so.0 (64 bit) which I have not on Centos 7 ( I have only newer versions) and I could not find this library with the help of yum. It is also impossible to complete the installation ignoring deps. Yum clean all does not help...
0
 

Accepted Solution

by:
Lelio Michele Lattari earned 0 total points
ID: 40466810
I have compiled Samba 4 from source and the problem has been solved!
0
 

Author Closing Comment

by:Lelio Michele Lattari
ID: 40473329
Nobody could help me
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
1. Introduction As many people are interested in Linux but not as many are interested or knowledgeable (enough) to install Linux on their system, here is a safe way to try out Linux on your existing (Windows) system. The idea is that you insta…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now