ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Linux Domain Controller

    IT Discussion
    linux debian
    11
    113
    39.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      scottalanmiller @Sparkum
      last edited by

      @Sparkum said:

      @scottalanmiller

      Will I actually see the linux server in my windows AD when its working?

      Yes, Windows can't tell it isn't a Windows machine. It's a AD server, just like any other.

      S P 2 Replies Last reply Reply Quote 0
      • S
        Sparkum @scottalanmiller
        last edited by

        @scottalanmiller

        Oh thats pretty sweet actually, that actually makes me not want to de-commission my windows based DC if they will actually talk to each other.

        I'll look into Pertino right now.

        1 Reply Last reply Reply Quote 1
        • P
          PSX_Defector @scottalanmiller
          last edited by

          @scottalanmiller said:

          @Sparkum said:

          @scottalanmiller

          Will I actually see the linux server in my windows AD when its working?

          Yes, Windows can't tell it isn't a Windows machine. It's a AD server, just like any other.

          More accurately, it's an LDAP server.

          Despite what people think, Microsoft kept up with proper standards for AD (the overarching product line). Active Directory encompasses a large scope of product lines, certificates, device integration, DNS, DHCP, etc. etc. etc. But at it's core, it's just an LDAP server. Not a super scalable one, but one none the less.

          What you get with Samba as a controller is an LDAP database. Given AD's ubiquity in the authentication scape, it's a good choice to use as it supports a broad base of OSes with little modification. You can't say the same thing about things like Netware's old eDirectory or straight OpenLDAP.

          1 Reply Last reply Reply Quote 0
          • S
            scottalanmiller
            last edited by

            Importantly, it is LDAP + Kerberos setup to the AD specks.

            1 Reply Last reply Reply Quote 0
            • S
              Sparkum
              last edited by Sparkum

              So following this write up:
              http://www.alexwyn.com/computer-tips/centos-samba4-active-directory-domain-controller

              I get to step 8 and do the seft test

              cd samba-master
              .\configure --enable-debug --enable-selftest

              and get met with the following error

              /root/samba-master/source4/lib/tls/wscript:37: error: Building the AD DC requires GnuTLS (eg libgnutls-dev, gnutls-devel) for ldaps:// support and for the BackipKey protocol.

              Would anyone be able to spread some light on that for me,

              Found and tried a few things but its not clearing up the message for me.

              As well when I do the next step

              make

              I get WAF_MAKE=1 python ./buildtools/bin/waf build
              Project not configured (run "waf configure' first)

              again tried a few things and still hitting walls.

              Any light that could be shed would be awesome.

              Thanks guys.

              1 Reply Last reply Reply Quote 0
              • C
                coliver
                last edited by

                It sounds like some dependencies didn't get installed. You may want to try installing from a package instead of from source. CentOS has a pre-packaged option. Just do:

                yum install samba4
                

                That should install all the dependencies.

                S 1 Reply Last reply Reply Quote 1
                • C
                  coliver
                  last edited by

                  If you want to continue you need to install GnuTLS' devel package.

                  yum install libgnutls-dev
                  

                  From the suggestion above.

                  1 Reply Last reply Reply Quote 0
                  • ?
                    A Former User @scottalanmiller
                    last edited by

                    @scottalanmiller said:

                    No PDC / BDC concepts in Active Directory. That's a SAM concept from NT 4 days and older. The DC concept replaced them in 2000 when AD was introduced.

                    There is still a PDC emulator role.

                    T S 2 Replies Last reply Reply Quote 1
                    • ?
                      A Former User
                      last edited by

                      Keep in mind a linux domain is giving you authentication only (and authorization on the local system) no group policy as of yet.

                      S 1 Reply Last reply Reply Quote 1
                      • T
                        thanksajdotcom @A Former User
                        last edited by

                        @thecreativeone91 said:

                        @scottalanmiller said:

                        No PDC / BDC concepts in Active Directory. That's a SAM concept from NT 4 days and older. The DC concept replaced them in 2000 when AD was introduced.

                        There is still a PDC emulator role.

                        I was going to mention that...LOL

                        1 Reply Last reply Reply Quote 0
                        • S
                          Sparkum @coliver
                          last edited by

                          @coliver

                          Tried this and get pages of errors stating cannot resolve to the mirror....Have I maybe just screwed something up with my box?

                          As well when I do

                          yum install libgnutls-dev I get not available.

                          C S 2 Replies Last reply Reply Quote 0
                          • C
                            coliver @Sparkum
                            last edited by

                            @Sparkum said:

                            @coliver

                            Tried this and get pages of errors stating cannot resolve to the mirror....Have I maybe just screwed something up with my box?

                            As well when I do

                            yum install libgnutls-dev I get not available.

                            Odd. You may have to clean the yum cache and try again.

                            Try:

                            yum clean-all
                            
                            1 Reply Last reply Reply Quote 0
                            • S
                              scottalanmiller
                              last edited by

                              That how to is for CentOS 6. Don't use that. Use the modern CentOS 7. It should have everything built in for you. Any how to that has you build from source should set of alarms like crazy. I know this is for home, so experiment all you want. But enterprise IT doesn't build from source, that's a hobbyist activity or a large IT department engineering group prepping packages with custom changes. That's not how RHEL / CentOS or any enterprise OS is meant to be used.

                              S 1 Reply Last reply Reply Quote 0
                              • S
                                scottalanmiller @A Former User
                                last edited by

                                @thecreativeone91 said:

                                Keep in mind a linux domain is giving you authentication only (and authorization on the local system) no group policy as of yet.

                                Group Policy has been available since day one with Samba4. That's never been lacking.

                                ? 1 Reply Last reply Reply Quote 0
                                • S
                                  Sparkum @scottalanmiller
                                  last edited by

                                  @scottalanmiller

                                  Ya I definately went with 7 hoping and assuming this wouldnt change.

                                  I'll switch to 6.5 (Was gonna go 6.5 just for the larger amount of documentation)

                                  C S 2 Replies Last reply Reply Quote 0
                                  • S
                                    scottalanmiller @A Former User
                                    last edited by

                                    @thecreativeone91 said:

                                    There is still a PDC emulator role.

                                    Emulator rule, true. But no PDC.

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      scottalanmiller @Sparkum
                                      last edited by

                                      @Sparkum said:

                                      @coliver

                                      Tried this and get pages of errors stating cannot resolve to the mirror....Have I maybe just screwed something up with my box?

                                      As well when I do

                                      yum install libgnutls-dev I get not available.

                                      That normally means DNS isn't working.

                                      1 Reply Last reply Reply Quote 0
                                      • C
                                        coliver @Sparkum
                                        last edited by coliver

                                        @Sparkum said:

                                        @scottalanmiller

                                        Ya I definately went with 7 hoping and assuming this wouldnt change.

                                        I'll switch to 6.5 (Was gonna go 6.5 just for the larger amount of documentation)

                                        Don't switch to 6.5, stick with 7. There are built packages for 7 available, it just looks like your yum mirrors got messed up somehow.

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          scottalanmiller @Sparkum
                                          last edited by

                                          @Sparkum said:

                                          @scottalanmiller

                                          Ya I definately went with 7 hoping and assuming this wouldnt change.

                                          I'll switch to 6.5 (Was gonna go 6.5 just for the larger amount of documentation)

                                          No, do NOT use a five year old Linux!! Use 7 and avoid that documentation like the plague. Building from source should be out of the question.

                                          S 1 Reply Last reply Reply Quote 0
                                          • S
                                            scottalanmiller
                                            last edited by

                                            Here is THE Linux "How To" site...

                                            https://www.howtoforge.com/samba-server-installation-and-configuration-on-centos-7

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 6
                                            • 6 / 6
                                            • First post
                                              Last post