Samba 4 software deployment

To install the Debian 7. The installation is a very simple and quick process where we will go through using all the default configuration options. You can download the latest ISO net install bit image file from the following link for example, debian Take a look at the proper hardware architecture for the system that you will install, and then choose the right ISO image file accordingly for your system's hardware. We did choose i , because our hardware is bit. We will run the dhcp , ntp , and Samba 4 Servers on the same system.

Therefore, it will perform Network Address Translation NAT for our clients, as in our example network our clients do not have direct access to the Internet; they will have Internet access using our Samba 4 Server as an intermediate machine.

For this configuration, our Samba 4 Server will have two network cards—one in our private network eth1 with IP It's really important for any environment to have all systems with the time properly synchronized. Because Samba 4 uses Kerberos as the authentication mechanism, it's even more important to have the system time in sync, so we will configure the ntp services on our server. The dhcp server provides us with a powerful solution to manage the IPs on the network, integrate them with DNS services, and also automatically register their hostnames another essential feature for AD services.

If you already have a dhcp server on your network, you don't need to configure this service again on the Samba 4 Server. If you already have an installed OS where you intend to install the Samba 4 Server, you can directly go to the installation and configuration phases of the dependencies and auxiliary software sections in this chapter.

In the book, we will assume a configuration where dhcp and Samba 4 Servers will run on the same system and will provide the basic configuration files for all these services. Samba 4 itself provides a basic but sufficient DNS server for most installations, and that's why we'll use it.

As in the case of the dhcp service, if you already have DNS servers on your network, you can continue using them instead. Just after you boot the system with your chosen installation CD, you will receive a screenshot similar to the following this one is from the netinst ISO image one:. You just need to follow the screens as the default options should be sufficient for most installations. When the installation is completed, don't forget to update and upgrade the OS:. This is an important point, and will guarantee that you will be working with all the security patches that are available up to this point, and your running system will not start production with any known security flaws.

With our system up, running, and up to date, we can start installing and configuring the Samba 4 Server's dependencies. It also saves a large number of working hours as we can install ready binaries for our system. All we need to do is issue the following command at the terminal:. It's recommended and is a best practice to just use the root account as needed, and to use su or sudo to execute the commands that need super user privileges for example, to install the software.

So, if you want to follow the sudo approach, you need to have it installed and configured, and in case of using su , don't forget to leave the root shell after the needed administration task is performed. We will use both approaches as examples throughout the book.

The previous command will install some auxiliary components, such as Kerberos, dhcp server, cups for printing services , and many libraries and other packages, which are needed to compile the Samba 4 Server. This is a powerful feature of the Debian package management system and saves a lot of time, as you see that many other packages are required to fulfill the installation command that we discussed previously.

While the installation of these packages is running, we only need to provide some information for the Kerberos configuration.

If you have provided your domain information during the installation of the system, the Default Realm will already be filled with the right information. If not, you can do it now and add the information about the Realm and Administrative Server in the dialog box that apt-get install will bring up while installing krb5-user :.

If you have installed Debian 7. So, let's just make sure that we have availability for all that we need in terms of filesystem features for a proper Samba 4 installation. In a standard Debian installation, we can check the availability of the features of filesystems we need just by issuing the following script on the command-line prompt:.

If you have a custom kernel and have the config file in a different location, change the file's path at the previous command to adjust it to your settings. With all these features available, we are in good shape and ready to proceed.

Now we will edit the fstab file of the OS to configure our system, thus enabling that features on our ext4 filesystem and providing them to the Samba 4 Server later on. Remember that any misconfiguration on your fstab file can make your system unbootable. So, after any changes on it, take a closer look at the edited fstab file to check if everything is as it should be. First, it's a good practice to create a backup of the fstab file before editing:.

The output of the preceding command must be OK as it is a confirmation that our original fstab file has a backup copy to restore the file in case of any issues. After that, the following one-line script will handle the edition task of fstab for us:. If the result is not like the output, as mentioned in the preceding code, check the special characters that we have on the script, because that can be a common source of mistakes.

Any errors found on the script execution must not change anything on your original fstab file. Take a closer look at it before you go to the next step. Another important OS configuration is the network interfaces' file as they are configured as dynamic by default , our domain, and DNS servers.

We will configure our Samba 4 Server for the Don't forget to add the second interface eth1 to the allow-hotplug directive, and the right configuration for your eth0 interface the one with Internet access and a default gateway.

The configuration specified in the preceding code creates our interface eth1 static , sets the IP and netmask addresses, and configures our domain. Remember to change the domain in the previous example with your domain. We will work with the examples in this book with the EALL. BR domain. Note that dns-nameservers is configured to be this server itself; this is because we will soon configure the Samba 4 Server, and it has a built-in DNS server. We can perform some final checks on the edited files, and if everything is good, we will restart our server:.

After the restart, we can continue with our configuration, and the next step is the configuration of two auxiliary packages that we mentioned earlier. We need this for a proper Samba 4 Server execution of ntp and dhcp. We already have both of them installed since our previous dependencies' installation phase; we just need to configure and enable them. Just add the following lines to the standard Debian NTP configuration file:.

The first line in the preceding code is a comment, and it's always a good idea to add descriptive information about what and why something is being changed, added, or removed in any configuration for example, you should replace the comment in the preceding example with something more descriptive.

Another good practice is to add your name and date close to the change that makes everything easier when we need to understand what has been changed and why something is not working as it should. The next two lines are for the configurations that are needed for signed ntp and ms-sntp authentication extensions. If you use the vi editor, you can replace the whole content of the file just after the file is opened , issuing: dGi. After that, just add the lines in the preceding command and close and save the file, issuing: Esc:x.

In some of the configuration lines in the preceding code, it is important to get a detailed explanation as they are directly involved in Samba 4's server operations.

After the comment line the first one, starting with the character , we have ddns-updates on. This is the directive that tells the dhcp server to update the DNS server about the new IP releases and register the client's hostname. All the option lines are information that the dhcp server will forward to its client's OSes when they get a dhcp lease. So, they will have a proper domain name server, netbios name server, ntp , and router information.

These privileges were set by using the following commands:. The zone cluster nodes are configured as members of a Windows Active Directory domain, using winbind to resolve users and groups that are configured within the Active Directory domain. The following user and password are created within the Active Directory, to be used by the HA for Samba fault monitor:. The Active Directory parameters Password never expire and User cannot change password are set to true.

Exit Print View. Search Scope:. This Document Entire Library. Documentation Home » Oracle Solaris Cluster 4.