dc-a

Basic

interface	VLAN	ip	gateway
e0	100	192.168.110.10/24	192.168.110.254

hostnamectl hostname dc-a.office.ssa2026.region
timedatectl set-timezone Asia/Yekaterinburg

/etc/apt/sources.list

deb http://deb.debian.org/debian trixie main

/etc/systemd/timesyncd.conf

[Time]
NTP=srv1-cod.cod.ssa2026.region 

BIND

Настройка dns сервера

/etc/bind/named.conf.options

options{
	allow-query {any;};
	listen-on {any;};
	forwarders {9.9.9.9};
}

/etc/bind/named.conf.local

zone "cod.ssa2026.region" {
    type slave;
    masters { 192.168.10.10; };
};

sambaAD

apt install samba winbind krb5-user krb5-config -y
 
	- office.ssa2026.region
	- dc-a.office.ssa2026.region
	- dc-a.office.ssa2026.region
 
mv /etc/samba/smb.conf /etc/samba/smb.conf.copy
 
systemctl stop smbd nmbd winbind
 
samba-tool domain provision --use-rfc2307 --interactive
	- Realm: office.ssa2026.region
	- Domain: office
	- Server Role: dc
	- DNS backend: BIND9_DLZ
	- Administrator password: P@ssw0rd
  
cp /var/lib/samba/private/krb5.conf /etc/krb5.conf
service samba-ad-dc restart
service samba-ad-dc status

vi /etc/krb5.conf

[...]
[realms]
OFFICE.SSA2026.REGION = {
	kdc=dc-a
	default_domain = office.ssa2026.region
}
[...]

Основные команды управления

Подсказки

samba-tool <что-то/ничего> -h

Управление OU:

samba-tool ou add "ou=ofadmins"
samba-tool ou add "ou=ofusers"

Управление группами:

samba-tool group add ofadmins
samba-tool group add ofusers
samba-tool group move ofadmins "ou=ofadmins"
samba-tool group move ofusers "ou=ofusers"
 
samba-tool group edit ofadmins # посмотреть файлик

Управление пользователями:

samba-tool user add ofadmin1 P@ssw0rd --userou "ou=ofadmins"
samba-tool user add ofauser1 P@ssw0rd --userou "ou=ofusers"
samba-tool user add user1 P@ssw0rd
 
samba-tool group addmembers ofadmins ofadmin1
samba-tool group addmembers ofusers ofuser1