Kugadzira Active Directory dura neDebian uye Samba. Chikamu chekutanga

Mhoroi vanhu vese. Mune dzino dzakateedzana makosi ini ndiri kuenda kukudzidzisa iwe maitiro ekumisikidza server Active Directory yemambure nemakomputa Windows pasi Debian (Kana tichizogadzira sevha, tichazviita nemazvo, huni). Muchikamu chekutanga ichi ini ndichatsanangura kuisirwa uye kumisikidzwa kweseva uye mune yechipiri ini ndichadzidzisa mashandisiro e kure manejimendi ekushandisa de Windows 7 uye maitiro ekubatanidza makomputa kudomain (Windows 7 pachayo uye a Windows XP). Gare gare ini ndichagadzira chikamu chechitatu kunze kwekubatana nezvikwata neGNU / Linux sezvo chiri chinhu chandisati ndaedza.

Pfungwa iyi yakauya kwandiri pandiri (kana yaive, zvinoenderana kana iwe ukaverenga ichi posvo) kutora kosi padanho reMicrocomputer yekugadzirisa michina matekinari matinogadzira netiweki server ne Windows 2008 (kwete RC2) uye ini ndakatanga kutarisa kana ndichigona kuita zvakafanana pasi pe GNU / Linux uye mhedzisiro yacho yakanaka chaizvo, kunyangwe mudzidzisi wangu akashamisika nekumhanya kweseva.

Usati waenderera mberi, uye zvirokwazvo vazhinji venyu vanozvibvunza kuti, Chii chinonzi Active Directory? Zvakanaka, iri izwi rinoshandiswa neMicrosoft kutaura kune seti yayo yezvishandiso zveinetiweki manejimendi senge sevha DNS, iko kutungamira kwevanoshandisa network, nezvimwe.

Tichada zvinotevera:

• Debian mubazi rayo rakagadzikana (mune yangu Wheezy 7.5 neXFCE senzvimbo yedesktop)
• Samba 4
• Mutengi ane Windows 7 / 8 / 8.1 nepakeji yekuisa iri kure server yekudzora mabasa (inodiwa kubata sevha, senge shandisa faira pamwe nevashandisi). Izvi zvichatsanangurwa mune inotevera dzidziso.

Kugadzira iyo server

Tisati taenderera mberi, isu tinofanirwa kugadzirisa mamwe mafaera kuti zvese zvishande, kunyanya kuitira kuti makomputa ari pamambure awane dura renzvimbo.

Chinhu chekutanga kupa server yedu kero yakagadziriswa IP. Muchiitiko chekuyedzwa kwangu kweDebian mu Virtualbox kumeso networking, zvinova izvo zvinobva pachigadziko, asi mune chaiyo server ndinoigadzirisa kubva Network maneja, saka ini ndichatsanangura maitiro anoitwa mune ese ari maviri.

Networking

Faira rekutanga ratichagadzirisa ndere / etc / network / interfaces.
# This file describes the network interfaces available on your system

auto eth0
iface eth0 inet static
address 192.168.0.67
netmask 255.255.255.0
gateway 172.26.0.1
dns-nameservers 192.168.0.67
dns-search clase.org
dns-domain clase.org
Kuva:

• adresi: iyo IP yechikwata chedu.
• netmask: iyo network mask. Mune diki kana imba network izvi kazhinji izvi.
• gedhi: gedhi. Kazhinji ndiyo IP yeiyo router iyo inotipa iyo yekubuda kune iyo Internet.
• dns-nameservers: Server ip DNS. Mune ino kesi iyo server, asi iwe unogona kuwedzera yechipiri, semuenzaniso veruzhinji ve Google.
• Yekupedzisira 2 inoratidza iyo domain yekutsvaga zita uye iro zita rezita pacharo.

Zvino isu tinofanirwa kuwedzera inotevera mitsara ku / etc / mauto:
127.0.0.1 Matrix.clase.org Matrix
192.168.0.67 Matrix.clase.org Matrix

Nezvo, zita rezita rinogadziriswa kuitira kuti riwanikwe pane network. Matrix ndiro zita randakapa server.

Pakupedzisira isu tinogadzirisa /etc/resolv.conf:

nameserver 192.168.0.13

Mune mamwe ma tutorials andakawana, ivo vakawedzera imwe nameserver tambo uye mamwe akati wandei akasiyana, asi mune yangu nyaya chete tambo yaive yakakwana.
Iye zvino tinotangazve sevhisi sevhisi uye ndizvozvo:

/etc/init.d/networking restart

Network maneja

Dzvanya-kurudyi kunetiweki icon uye sarudza Edza kubatana. Tichawana maratidziro atakagadzira, asi isu tinongofarira chete kufona Wired network 1 kana chero chawakatumidza zita racho. Tinobaya kaviri pairi uye hwindo idzva richaonekwa uye tichaenda IPv4 marongero. En nzira tinosarudza manyuwari. Zvino tinya Wedzera uye zadza minda yese:

Iye zvino tinoenda kune iyo tebhu General uye tinova nechokwadi chekuti yakanyorwa Vese vashandisi vanofanirwa kubatana kunetiweki iyi. Dzvanya pa Chengetedza ndokubva taenda.

Kuisa Samba 4

Muchiitiko chedu tichaenda kurodha pasi nekunyora Samba 4 kubva papeji rayo nekuti muDebian inongowanikwa chete kuburikidza neyekuchengetedza Backports uye zvakandipa matambudziko ekutsamira.

Tiri kuenda http://samba.org kurodha yazvino vhezheni vhezheni uye unzip pasuru yacho mufaira.

Kuti tizviunganidze isu tinofanirwa kuisa anotevera mapakeji:

apt-get install build-essential libacl1-dev libattr1-dev \
libblkid-dev libgnutls-dev libreadline-dev python-dev libpam0g-dev \
python-dnspython gdb pkg-config libpopt-dev libldap2-dev \
dnsutils libbsd-dev attr krb5-user docbook-xsl libcups2-dev acl

Pane imwe nguva yakadhindwa uye isina kuvharwa, tinozarura sarudzo uye tiende kune faira uye tiite mirairo inotevera:
./configure --enable-debug
make
make install

Iye zvino tinowedzera nzira itsva mu PATH. Mune mhaka yangu mu /etc/bash.bashrc kushandisa kune vese vashandisi, kusanganisira mudzi.

export PATH=$PATH:/usr/local/samba/bin:/usr/local/samba/sbin

Uye isu zvakare tinogadzira chinongedzo mukati / nezvimwe zveSamba kuti uwane iyo yekumisikidza faira:

ln -s /usr/local/samba/etc/ /etc/samba

Tichagadzirisa Samba server. Kune izvi isu tinoita:

samba-tool domain provision --realm=clase.org --domain=CLASE --adminpass=Contraseña --use-rfc2307

kupi:

• –Dunhu: izita rezita rakazara.
• –Domain: ndiyo duraini. Inofanira kunge iri mukati mavara makuru
• –Adminspass: ndiyo password ye network network.
• -Shandisa-rfc2307: kushandisa AC.

Kana zvese zvikafamba mushe mushure mekanguva Samba inopedza kuzvimisikidza pachayo. Kana iwe uchida kuziva dzese dzinogona kuita sarudzo, ingo mhanya:

samba-tool domain provision -h

Iye zvino tava kuzogadzirisa iyo faira /etc/samba/smb.conf. Parizvino chinotifadza iwo mutsara unotevera:
dns forwarder = 192.168.0.1

Iyi tambo inofanirwa kunongedza kune server yeDNS inotipa mukana wekupinda muInternet (mune ino kesi, iyo router). Samba inotora kumisikidza kusarongeka kwenetiweki asi zvinokurudzirwa kuti zviongorore.

Iye zvino isu tinotanga sevhisi:

samba

uye isu tinotarisa kubatana nekuita:

smbclient -L localhost -U%

Uye kana zvese zviri zvechokwadi tichaona chimwe chinhu chakafanana neichi:

Kana ikatipa kukanganisa kwekubatanidza, tinoongorora matanho epfungwa yapfuura. Irogi yeSamba iri mu /usr/local/samba/var/log.samba

Iye zvino tave kuzoteedzera iyo faira /usr/local/samba/private/krb5.conf a / nezvimwe. Iye zvino tichaenda kutarisa kuti tinokwanisa kubatana here:

kinit administrator@CLASE.ORG

Ojo, dura racho rinofanirwa kuverengerwa.

Ipapo ichatibvunza isu password yemushandisi (mune ino kesi yemaneja) uye kana isu tikawana meseji yakafanana neiyo «Yambiro: password yako ichapera mumazuva makumi mana musi waMu Jul 40 14:13:57 10» ndeyekuti yakabuda nemazvo.

Uye kusvika ikozvino chikamu chekutanga chedzidziso. Tinoverenga mune zvinotevera.