[Samba] setting up a new ADS infrastructure

[Rowland penny]

On 24/06/2019 10:00, Stefan Froehlich via samba wrote:
> On Mon, Jun 24, 2019 at 10:52:07AM +0200, Stefan Froehlich via samba wrote:
>> <http://froehlich.priv.at/www/samba/>
> Always try your own links before posting them... it must be
> <http://froehlich.priv.at/samba/> of course, sorry.
>
No problem, I just refreshed the old page I had open ;-)

You have this on the DC:

controller:~# vi /etc/network/interfaces
iface enp1s0 inet static
     address 192.168.1.11
     broadcast 192.168.122.255
     netmask 255.255.255.0
     gateway 192.168.1.1

And this on the fileserver:

herakles:~# vi /etc/network/interfaces
iface enp1s0 inet static
     address 192.168.122.12
     broadcast 192.168.122.255
     netmask 255.255.255.0
     gateway 192.168.122.1

It might help if they were both in the same subnet.

I install these packages:

apt-get install samba acl attr winbind libpam-winbind libpam-krb5 
libnss-winbind krb5-config krb5-user ntp dnsutils ldb-tools

You do not seem to be setting up a time server.

At the bottom of the 'controller' page, you are creating the user test, 
you set the '--gid-number' to '100'. I take it you got this from a DC. I 
say this because this is the default from idmap.ldb on a DC. I would use 
the ID for Domain Users, '10000' in your case.

Rowland