ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Linux Domain Controller

    Scheduled Pinned Locked Moved IT Discussion
    linuxdebian
    113 Posts 11 Posters 41.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • coliverC
      coliver @Sparkum
      last edited by coliver

      @Sparkum said:

      @coliver

      Sorry ignore the initial nslookup that was done at work.

      Second one was done at home, my router is set to point to google.
      Then when I add computers to my domain I change it to my home based DC.

      Should I change the DNS entry to 104.167.119.11 or to my home based 192.168.1.10
      (or both)

      Can you do

      ip addr
      

      On your Samba server? That should tell you what the public IP address is, compare that to your results... although you really shouldn't be doing LDAP over the public internet... I guess if you were doing LDAPS it wouldn't be so bad but... still...

      S 1 Reply Last reply Reply Quote 1
      • S
        Sparkum @coliver
        last edited by

        @coliver

        centos.PNG

        This means nothing to me haha

        coliverC 1 Reply Last reply Reply Quote 0
        • coliverC
          coliver @Sparkum
          last edited by

          @Sparkum said:

          @coliver

          centos.PNG

          This means nothing to me haha

          The previous command queries all interfaces on your server. It then pulls the requested info. In this instance we were looking for the IP address. So the lo interface, or local loopback, has the 127.0.0.1 address. Whereas the ens33 interface, or ethernet interface has the ip address of 104.167.119.11. It also shows the IPv6 addresses as well.

          That IP address matches the one for nslookup so DNS is matching. Although from your home workstation you should use your DC as your primary DNS lookup and Google as the secondary.

          S 1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller
            last edited by

            inet = internet

            Internet address is 104.167.119.11/24

            1 Reply Last reply Reply Quote 0
            • S
              Sparkum @coliver
              last edited by

              @coliver

              So changing home computer to

              192.168.1.10
              8.8.8.8

              I get

              C:\Users\admin>nslookup dc.pricehouse.ca
              Server: hostserver.pricehouse.ca
              Address: 192.168.1.10

              *** hostserver.pricehouse.ca can't find dc.pricehouse.ca: Non-existent domain

              so thats interesting

              coliverC 1 Reply Last reply Reply Quote 0
              • coliverC
                coliver @Sparkum
                last edited by

                @Sparkum said:

                @coliver

                So changing home computer to

                192.168.1.10
                8.8.8.8

                I get

                C:\Users\admin>nslookup dc.pricehouse.ca
                Server: hostserver.pricehouse.ca
                Address: 192.168.1.10

                *** hostserver.pricehouse.ca can't find dc.pricehouse.ca: Non-existent domain

                so thats interesting

                Your hostserver is authoritative for that domain. So you will need to add a DNS entry for it.

                S 1 Reply Last reply Reply Quote 0
                • S
                  Sparkum @coliver
                  last edited by

                  @coliver

                  Sorry,

                  A dns entry on my dc to dc.pricehouse.ca?

                  coliverC 1 Reply Last reply Reply Quote 0
                  • coliverC
                    coliver @Sparkum
                    last edited by

                    @Sparkum Right. On the Windows DC, which your workstation is now pointing to, you need to create a A record for the Samba server. That won't fix the issue you are having but you should be able to ping it now.

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      Sparkum @coliver
                      last edited by

                      @coliver

                      Absolutely correct

                      C:\Users\admin>nslookup dc.pricehouse.ca
                      Server: hostserver.pricehouse.ca
                      Address: 192.168.1.10

                      Name: dc.pricehouse.ca
                      Address: 104.167.119.11

                      full pings

                      1 Reply Last reply Reply Quote 0
                      • S
                        Sparkum @coliver
                        last edited by

                        @coliver

                        Sorry never tried this before.

                        My result was forewalld.noarch 0.3.9-11.e.17 @base

                        coliverC 1 Reply Last reply Reply Quote 0
                        • coliverC
                          coliver @Sparkum
                          last edited by

                          @Sparkum said:

                          @coliver

                          Sorry never tried this before.

                          My result was forewalld.noarch 0.3.9-11.e.17 @base

                          So the CentOS firewall is installed, but it won't run, or it is running and dropping traffic. Can you try:

                          firewall-cmd --state
                          

                          It should return running, not running, or command not found.

                          S 1 Reply Last reply Reply Quote 0
                          • DanpD
                            Danp
                            last edited by

                            With Centos 7, I believe you should be using "systemctrl" instead of "service".

                            sudo systemctl enable firewalld
                            sudo systemctl start firewalld
                            sudo systemctl status firewalld
                            ? 1 Reply Last reply Reply Quote 2
                            • ?
                              A Former User @Danp
                              last edited by

                              @Danp said:

                              With Centos 7, I believe you should be using "systemctrl" instead of "service".

                              sudo systemctl enable firewalld
                              sudo systemctl start firewalld
                              sudo systemctl status firewalld
                              

                              Yep it will redirect the service commands but it's depreciated.

                              1 Reply Last reply Reply Quote 0
                              • S
                                Sparkum @coliver
                                last edited by

                                @coliver

                                State is definitely not running.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Sparkum
                                  last edited by

                                  Well for some reason when I got home and started to re-try everything after confirming the service was indeed stopped, suddenly I could start it, and complete step 8 with success....

                                  Still not a DC but progress for sure

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    Sparkum
                                    last edited by

                                    So at this point I would have to assume that there is a mistake in on smb.conf file eh?

                                    Just going through the checklist

                                    Installed samba ....... Yep
                                    smb.conf file .........Prob?
                                    Made samba/anonymous.....yep
                                    Firewall steps........yep

                                    Can access it from windows comp.......No
                                    See it in my domain......No

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      Sparkum
                                      last edited by

                                      Here is some of my global and share; I'm assuming this is esentially the most important data

                                      Share.JPG General.JPG

                                      coliverC 1 Reply Last reply Reply Quote 0
                                      • coliverC
                                        coliver @Sparkum
                                        last edited by coliver

                                        @Sparkum said:

                                        Here is some of my global and share; I'm assuming this is esentially the most important data

                                        Share.JPG General.JPG

                                        I don't think you have an eth0 interface. At least not from the previous screenshot. I believe your interface is called ens33. Although I could be mistaken. Also your hosts allow option isn't going to let your workstation connect to it as it isn't in one of those subnets.

                                        S 1 Reply Last reply Reply Quote 0
                                        • S
                                          Sparkum @coliver
                                          last edited by

                                          @coliver

                                          Adjusted.IP.JPG

                                          coliverC 1 Reply Last reply Reply Quote 0
                                          • coliverC
                                            coliver @Sparkum
                                            last edited by

                                            @Sparkum said:

                                            @coliver

                                            Adjusted.IP.JPG

                                            hosts allow is still going to block anything coming from the public internet. Unless you have a VPN setup between your Samba server and the workstation then you will need to change that to accept the public IP address of the workstation.

                                            S 1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 6
                                            • 3 / 6
                                            • First post
                                              Last post