Linux Domain Controller

Sparkum

@scottalanmiller

Will I actually see the linux server in my windows AD when its working?

scottalanmiller

@Sparkum said:

@scottalanmiller

Will I actually see the linux server in my windows AD when its working?

Yes, Windows can't tell it isn't a Windows machine. It's a AD server, just like any other.

Sparkum

@scottalanmiller

Oh thats pretty sweet actually, that actually makes me not want to de-commission my windows based DC if they will actually talk to each other.

I'll look into Pertino right now.

PSX_Defector

@scottalanmiller said:

@Sparkum said:

@scottalanmiller

Will I actually see the linux server in my windows AD when its working?

Yes, Windows can't tell it isn't a Windows machine. It's a AD server, just like any other.

More accurately, it's an LDAP server.

Despite what people think, Microsoft kept up with proper standards for AD (the overarching product line). Active Directory encompasses a large scope of product lines, certificates, device integration, DNS, DHCP, etc. etc. etc. But at it's core, it's just an LDAP server. Not a super scalable one, but one none the less.

What you get with Samba as a controller is an LDAP database. Given AD's ubiquity in the authentication scape, it's a good choice to use as it supports a broad base of OSes with little modification. You can't say the same thing about things like Netware's old eDirectory or straight OpenLDAP.

scottalanmiller

Importantly, it is LDAP + Kerberos setup to the AD specks.

Sparkum

So following this write up:
http://www.alexwyn.com/computer-tips/centos-samba4-active-directory-domain-controller

I get to step 8 and do the seft test

cd samba-master
.\configure --enable-debug --enable-selftest

and get met with the following error

/root/samba-master/source4/lib/tls/wscript:37: error: Building the AD DC requires GnuTLS (eg libgnutls-dev, gnutls-devel) for ldaps:// support and for the BackipKey protocol.

Would anyone be able to spread some light on that for me,

Found and tried a few things but its not clearing up the message for me.

As well when I do the next step

make

I get WAF_MAKE=1 python ./buildtools/bin/waf build
Project not configured (run "waf configure' first)

again tried a few things and still hitting walls.

Any light that could be shed would be awesome.

Thanks guys.

coliver

It sounds like some dependencies didn't get installed. You may want to try installing from a package instead of from source. CentOS has a pre-packaged option. Just do:

yum install samba4

That should install all the dependencies.

coliver

If you want to continue you need to install GnuTLS' devel package.

yum install libgnutls-dev

From the suggestion above.

@scottalanmiller said:

No PDC / BDC concepts in Active Directory. That's a SAM concept from NT 4 days and older. The DC concept replaced them in 2000 when AD was introduced.

There is still a PDC emulator role.

Keep in mind a linux domain is giving you authentication only (and authorization on the local system) no group policy as of yet.

thanksajdotcom

@thecreativeone91 said:

@scottalanmiller said:

No PDC / BDC concepts in Active Directory. That's a SAM concept from NT 4 days and older. The DC concept replaced them in 2000 when AD was introduced.

There is still a PDC emulator role.

I was going to mention that...LOL

Sparkum

@coliver

Tried this and get pages of errors stating cannot resolve to the mirror....Have I maybe just screwed something up with my box?

As well when I do

yum install libgnutls-dev I get not available.

coliver

@Sparkum said:

@coliver

Tried this and get pages of errors stating cannot resolve to the mirror....Have I maybe just screwed something up with my box?

As well when I do

yum install libgnutls-dev I get not available.

Odd. You may have to clean the yum cache and try again.

Try:

yum clean-all

scottalanmiller

That how to is for CentOS 6. Don't use that. Use the modern CentOS 7. It should have everything built in for you. Any how to that has you build from source should set of alarms like crazy. I know this is for home, so experiment all you want. But enterprise IT doesn't build from source, that's a hobbyist activity or a large IT department engineering group prepping packages with custom changes. That's not how RHEL / CentOS or any enterprise OS is meant to be used.

scottalanmiller

@thecreativeone91 said:

Keep in mind a linux domain is giving you authentication only (and authorization on the local system) no group policy as of yet.

Group Policy has been available since day one with Samba4. That's never been lacking.

Sparkum

@scottalanmiller

Ya I definately went with 7 hoping and assuming this wouldnt change.

I'll switch to 6.5 (Was gonna go 6.5 just for the larger amount of documentation)

scottalanmiller

@thecreativeone91 said:

There is still a PDC emulator role.

Emulator rule, true. But no PDC.

scottalanmiller

@Sparkum said:

@coliver

Tried this and get pages of errors stating cannot resolve to the mirror....Have I maybe just screwed something up with my box?

As well when I do

yum install libgnutls-dev I get not available.

That normally means DNS isn't working.

coliver

@Sparkum said:

@scottalanmiller

Ya I definately went with 7 hoping and assuming this wouldnt change.

I'll switch to 6.5 (Was gonna go 6.5 just for the larger amount of documentation)

Don't switch to 6.5, stick with 7. There are built packages for 7 available, it just looks like your yum mirrors got messed up somehow.

scottalanmiller

@Sparkum said:

@scottalanmiller

Ya I definately went with 7 hoping and assuming this wouldnt change.

I'll switch to 6.5 (Was gonna go 6.5 just for the larger amount of documentation)

No, do NOT use a five year old Linux!! Use 7 and avoid that documentation like the plague. Building from source should be out of the question.