Linux Domain Controller

scottalanmiller

This is ALL that it takes to install Samba4 on CentOS:

yum install samba samba-client samba-common

@scottalanmiller said:

@thecreativeone91 said:

Keep in mind a linux domain is giving you authentication only (and authorization on the local system) no group policy as of yet.

Group Policy has been available since day one with Samba4. That's never been lacking.

True. But there is no replication for sysvol. So in production it would suck.

scottalanmiller

@thecreativeone91 said:

@scottalanmiller said:

True. But there is no replication for sysvol. So in production it would suck.

There is no BUILT IN replication. But Linux has great replication natively. Here is the official SysVol Replication How To:

https://wiki.samba.org/index.php/SysVol_Replication

Danp

@scottalanmiller said:

CentOS and OpenSuse are always my "go to" choices before anything else. Lots of things are made for Ubuntu today, so that gets used a bit. ML is on Ubuntu, for example, because the NodeBB developers develop on Ubuntu so the testing is better. Sadly, no OpenSuse on CloudatCost, yet. I'm pushing them for that and for FreeBSD.

Looks like FreeBSD is coming... https://twitter.com/devashevchuk/status/583256011529666560

scottalanmiller

Looks like adding your own OS image is coming. That's cool. I'd prefer if they had their own images, way lower overhead to start up.

Sparkum

So far I think its safe so say I dont have enough Linux knowledge to easily make a linux DC haha

coliver

Anything in particular you are getting stuck on?

Sparkum

So I believe I followed the link Scott posted fairly well.

I'm trying to do

[root@server1 ~]# firewall-cmd --permanent --zone=public --add-service=samba

to which I just get its not running, reading into it that may be something Cloudatcost is in control of though?

So then even moving past it, I cant seem to browse to it from my house.

I'm using a computer that is currently just pulling DHCP from my router and isnt connected to the domain. Can ping it just fine but cant go \dc (dc is what I made the netbios name)

MattSpeller

@Sparkum said:

So far I think its safe so say I dont have enough Linux knowledge to easily make a linux DC haha

You're doing well so far, stick with it!

coliver

@Sparkum said:

So I believe I followed the link Scott posted fairly well.

I'm trying to do

[root@server1 ~]# firewall-cmd --permanent --zone=public --add-service=samba

to which I just get its not running, reading into it that may be something Cloudatcost is in control of though?

So then even moving past it, I cant seem to browse to it from my house.

I'm using a computer that is currently just pulling DHCP from my router and isnt connected to the domain. Can ping it just fine but cant go \dc (dc is what I made the netbios name)

Nope sounds like the CentOS firewall isn't running. You should turn it on. If I'm not mistaken that may be:

service firewalld start

There may be a different/better way to do it though.

Sparkum

@coliver

Redirecting to /bin/systemctl start firewall.service
Failed to issue method call: Unit firewall.service failed to load: no such file or directory

coliver

@Sparkum said:

@coliver

Redirecting to /bin/systemctl start firewall.service
Failed to issue method call: Unit firewall.service failed to load: no such file or directory

That is interesting. I thought firewalld was installed from scratch on a minimal install. Can you try

yum list installed | grep firewall

That will tell you if that package is installed.

Sparkum

@coliver

Correct me if I'm wrong though but I assume I have more than one issue.

I cant browse to \dc but if the firewall is off that means thats not preventing me from accessing it, so there's another reason for that particular problem, and just a second one with the firewall.

coliver

@Sparkum said:

@coliver

Correct me if I'm wrong though but I assume I have more than one issue.

I cant browse to \dc but if the firewall is off that means thats not preventing me from accessing it, so there's another reason for that particular problem, and just a second one with the firewall.

I would assume you need to use the Fully Qualified Domain Name, did you point an address to that dc? What happens if you do nslookup dc from your client? Oh you said you can ping it, is that by the netbios name?

Sparkum

@coliver

Changed netbios name to dc.pricehouse.ca

10.25.10.10.in-addr.arpa
primary name server = localhost
responsible mail addr = nobody.invalid
serial = 1
refresh = 600 (10 mins)
retry = 1200 (20 mins)
expire = 604800 (7 days)
default TTL = 10800 (3 hours)
Server: UnKnown
Address: 10.10.25.10

coliver

@Sparkum What about from your workstation/client? I assume it will probably be the same just want to make sure.

Sparkum

Server: google-public-dns-a.google.com
Address: 8.8.8.8

Non-authoritative answer:
Name: dc.pricehouse.ca
Address: 104.167.119.11

Sparkum

@coliver

I'm assuming at one point when I do something "right" this dc should appear in my windows dc like @scottalanmiller mentioned, however; definitely not currently there.

coliver

@Sparkum said:

@coliver

I'm assuming at one point when I do something "right" this dc should appear in my windows dc like Scott mentioned, however; definitely not currently there.

Right, those two IP addresses don't match. Meaning something is wrong with the DNS system. I notice that your workstation is using Google as its primary DNS server. That should be pointing to your DC or on-site DNS server which is authoritative to your zone. Can you ping 10.10.25.10 from your workstation?

Sparkum

@coliver

Sorry ignore the initial nslookup that was done at work.

Second one was done at home, my router is set to point to google.
Then when I add computers to my domain I change it to my home based DC.

Should I change the DNS entry to 104.167.119.11 or to my home based 192.168.1.10
(or both)