[Samba] HOW-TO on Samba4 Installation with dnsmasq

[Tobias Schliebitz]

Dear all,

I'm currently trying out Samba4.0.0-alpha10. Because I'm unfamiliar with 
the Berkeley Internet Name Demon (bind), I've so far been using dnsmasq 
on my home network. I just want to inform eveybody who cares that it's 
possible to set up Samba4 and dnsmasq so as to allow domain logons from 
a Windows 7 workstation.

Generally, I followed the how-to on the samba-wiki 
(http://wiki.samba.org/index.php/Samba4/HOWTO). But I skipped Step 8 
(Configure Server-side DNS) and put most of the entries in what is 
called YOUR.ZONE.conf into my /etc/hosts, which is in turn read by 
dnsmasq and propagated to the network clients. Here is what it looks like:

---

127.0.0.1               localhost                                       
localhost
192.168.100.1           yoda.heimatnetz.priv                            yoda
[... description of my network clients ...]

192.168.100.1           gc._msdcs.heimatnetz.priv                       
gc._msdcs
192.168.100.1           _gc._tcp.heimatnetz.priv                        
_gc._tcp
192.168.100.1           
_gc._tcp.Default-First-Site-Name._sites.heimatnetz.priv                 
_gc._tcp.Default-First-Site-Name._sites
192.168.100.1           
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.heimatnetz.priv     
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs
192.168.100.1           _gc._tcp.gc._msdcs.heimatnetz.priv              
_gc._tcp.gc._msdcs
192.168.100.1           _ldap._tcp.gc._msdcs.heimatnetz.priv            
_ldap._tcp.gc._msdcs
192.168.100.1           _ldap._tcp.heimatnetz.priv                      
_ldap._tcp
192.168.100.1           _ldap._tcp.dc._msdcs.heimatnetz.priv            
_ldap._tcp.dc._msdcs

---

Of course, you must be very careful with any MS-specific entry containig 
an underscore ( _ ).
Then the /etc/dnsmasq.conf file:

---

interface=eth0
domain-needed
bogus-priv
filterwin2k

dhcp-authoritative
domain=heimatnetz.priv

dhcp-range=192.168.100.200,192.168.100.250,12h

dhcp-option=1,255.255.255.0             # Subnet Mask
dhcp-option=3,192.168.100.3             # Router/Gateway
dhcp-option=6,192.168.100.1             # Domain Server (DNS)
dhcp-option=44,192.168.100.1            # Netbios Name Server (WINS)
dhcp-option=4,192.168.100.1             # Time Server

---

Naturally, the lines concerning DNS and WINS are especially important.
No special entries in the smb.conf file besides those created by 
provisioning are necessary, but the entries there ought to match your 
network configuration. Mine are:

---

[globals]
        netbios name    = YODA
        server string   = Samba 4 auf yoda.heimatnetz.priv

        workgroup       = HEIMATNETZ
        realm           = HEIMATNETZ.PRIV
        server role     = domain controller

        unix charset    = ISO8859-1
        dos charset     = UTF8
        log level       = 0

        time server     = yes

[netlogon]
        path = /usr/local/samba/var/locks/sysvol/heimatnetz.priv/scripts
        read only = no

[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = no

---

I hope this helps someone save some time, as it cost me many hours to 
find this way.

Cheers,
Tobias