Ukusetha i-Active Directory server nge-Debian ne-Samba. Ingxenye yokuqala

Sanibonani nonke. Kulolu chungechunge lwezifundo ngizokufundisa ukuthi ungayisetha kanjani iseva I-Active Directory yamanethiwekhi anamakhompyutha Windows phansi Debian (Uma sizosetha isiphakeli, sizokwenza kahle, izinkuni zokubasa). Kulesi sitolimende sokuqala ngizochaza ukufakwa nokulungiswa kweseva kuthi kwesibili ngifundise ukuthi isetshenziswa kanjani ifayili le- amathuluzi okuphatha akude de Windows 7 nokuthi uwajoyina kanjani amakhompyutha kusizinda (iWindows 7 uqobo ne-a Windows XP). Kamuva ngizokwenza isitolimende sesithathu ngaphandle kokuthi ngingawajoyina kanjani amaqembu ane-GNU / Linux ngoba kuyinto okusamele ngiyivivinye.

Lo mqondo weza kimi ngenkathi ngikhona (noma ngangikhona, kuya ngokuthi ufunda nini lokhu okuthunyelwe) ngithatha isifundo esitelekeni sikachwepheshe wokulungisa imishini ye-Microcomputer lapho sakha khona iseva yenethiwekhi nge Windows 2008 (hhayi i-RC2) futhi ngaqala ukubheka ukuthi ngingaqalisa yini okufanayo ngaphansi I-GNU / Linux futhi umphumela muhle impela, ngisho nothisha wami wamangala ngejubane leseva.

Ngaphambi kokuqhubeka, futhi ngokuqinisekile iningi lenu lizibuza ukuthi, Yini i-Active Directory? Yigama elisetshenziswa yiMicrosoft ukubhekisa kusethi yayo yamathuluzi wokuphathwa kwenethiwekhi njengeseva DNS, ukuphathwa kwabasebenzisi benethiwekhi, njll.

Sizodinga okulandelayo:

• Debian egatsheni layo elizinzile (kimi Wheezy 7.5 ngeXFCE njengendawo yedeskithophu)
• I-Samba 4
• Iklayenti eline- IWindows 7 / 8 / 8.1 ngephakeji ukufaka imisebenzi yokulawula iseva eyihlane (edingekayo ukuphatha iseva, njenge yabelana ngefolda nabasebenzisi). Lokhu kuzochazwa esifundweni esilandelayo.

Ukusetha iseva

Ngaphambi kokuqhubeka, kufanele sihlele amanye amafayela ukuze konke kusebenze, ikakhulukazi ukuze amakhompyutha akule nethiwekhi athole i-server yesizinda.

Into yokuqala ukunikeza iseva yethu ikheli Fixed IP. Endabeni yokuhlolwa kwami ​​kwe-Debian ku I-Virtualbox sebenzisa ukuxhumana, okuvela kusisekelo, kepha kuseva yangempela ngiyilungiselela kusuka Umphathi Wenethiwekhi, ngakho-ke ngizochaza ukuthi kwenziwa kanjani kuzo zombili.

Izingosi

Ifayela lokuqala esizohlela ukuthi / njll / inethiwekhi / ukuxhumana.
# This file describes the network interfaces available on your system

auto eth0
iface eth0 inet static
address 192.168.0.67
netmask 255.255.255.0
gateway 172.26.0.1
dns-nameservers 192.168.0.67
dns-search clase.org
dns-domain clase.org
Ukuba:

• ikheli: i-IP yethimba lethu.
• inetha: imaski yenethiwekhi. Enethiwekhi encane noma ekhaya imvamisa lokhu.
• isango: isango. Imvamisa yi-IP yomzila osinika ukuphuma ku-inthanethi.
• i-dns-nameservers: Iseva ip DNS. Kulokhu iseva, kepha ungangeza isekhondi, ngokwesibonelo imiphakathi ye- -Google.
• I-2 yokugcina ikhombisa igama lokusesha lesizinda negama lesizinda uqobo.

Manje kufanele sengeze imigqa elandelayo ku / njll / Sebawoti:
127.0.0.1 Matrix.clase.org Matrix
192.168.0.67 Matrix.clase.org Matrix

Ngalokhu, igama lesizinda lizoxazululwa ukuze litholakale kunethiwekhi. Matrix igama engilinike iseva.

Ekugcineni siyahlela /etc/resolv.conf:

nameserver 192.168.0.13

Kokunye ukufundisa engikutholile, bangeze omunye umugqa we-nameserver nokuhlukahluka okumbalwa, kepha kimi kuphela ulayini owodwa ubanele.
Manje siqala kabusha insiza yenethiwekhi futhi yilokho kuphela:

/etc/init.d/networking restart

Umphathi Wenethiwekhi

Chofoza inkinobho yegundane kwesokudla kusithonjana senethiwekhi bese ukhetha Hlela ukuxhumana. Sizothola amanethiwekhi esiwamisile, kepha sinentshisekelo kuphela kukholi Inethiwekhi enentambo 1 noma yini oyiqambe ngegama. Sichofoza kabili kuyo bese kuvela iwindi elisha bese siya kulo Izilungiselelo ze-IPv4. e indlela sikhetha Manual. Manje chofoza ku Faka bese ugcwalisa zonke izinkambu:

Manje siya kuthebhu General futhi senza isiqiniseko sokuthi imakiwe Bonke abasebenzisi kumele baxhume kule nethiwekhi. Chofoza ku- Gcina sahamba ke.

Ukufaka iSamba 4

Esimweni sethu sizolanda futhi sihlanganise iSamba 4 ekhasini layo ngoba kuDebian itholakala kuphela endaweni yokugcina izinto Izikhumulo ezingemuva futhi kwanginikeza izinkinga zokuncika.

Siya http://samba.org ukulanda uhlobo lwakamuva oluzinzile bese uvula iziphu kufolda.

Ukuyihlanganisa sizodinga ukufaka amaphakheji alandelayo:

apt-get install build-essential libacl1-dev libattr1-dev \
libblkid-dev libgnutls-dev libreadline-dev python-dev libpam0g-dev \
python-dnspython gdb pkg-config libpopt-dev libldap2-dev \
dnsutils libbsd-dev attr krb5-user docbook-xsl libcups2-dev acl

Uma sesilandile futhi savulwa uziphu, sivula ukuphela bese sidlulela kufolda bese senza imiyalo elandelayo:
./configure --enable-debug
make
make install

Manje sengeza imizila emisha kufayela le- PATH. Endabeni yami ku /etc/bash.bashrc ukufaka isicelo kubo bonke abasebenzisi, kufaka phakathi izimpande.

export PATH=$PATH:/usr/local/samba/bin:/usr/local/samba/sbin

Futhi sakha isixhumanisi ngaphakathi / njll seSamba ukuthola ifayela lokumisa:

ln -s /usr/local/samba/etc/ /etc/samba

Sizomisa iseva ye-Samba. Ngenxa yalokhu senza lokhu:

samba-tool domain provision --realm=clase.org --domain=CLASE --adminpass=Contraseña --use-rfc2307

kuphi:

• Indawo: igama eligcwele lesizinda.
• Isizinda: yisizinda. Kufanele ibe ku ofeleba
• –I-Adminspass: iphasiwedi yomlawuli wenethiwekhi.
• Sebenzisa i-rfc2307: ukwenza kusebenze i-AC.

Uma konke kuhamba kahle ngemuva kwesikhashana uSamba uzoqeda ukuzilungiselela. Uma ufuna ukwazi zonke izinketho ezingenzeka, vele usebenzise:

samba-tool domain provision -h

Manje sizohlela ifayela /etc/samba/smb.conf. Okwamanje okusithandayo yilayini olandelayo:
dns forwarder = 192.168.0.1

Lo mugqa kufanele ukhombe kuseva ye-DNS esinikeza ukufinyelela kwi-Intanethi (kulokhu, i-router). I-Samba ithatha ukumiswa kwenethiwekhi okuzenzakalelayo kepha kunconywa ukukuqinisekisa.

Manje siqala insiza:

samba

futhi sihlola ukuxhumana ngokwenza:

smbclient -L localhost -U%

Futhi uma konke kulungile, sizobona okufana nalokhu:

Uma kwenzeka isinikeze iphutha lokuxhuma, siqinisekisa izinyathelo zephuzu langaphambilini. Igogi le-Samba lise- / usr / indawo / isamba /var /log.samba

Manje sizokopisha ifayela /usr/local/samba/private/krb5.conf a / njll. Manje sizohlola ukuthi singaxhuma yini:

kinit administrator@CLASE.ORG

Ojo, isizinda kufanele senziwe ngofeleba.

Ngemuva kwalokho izosicela iphasiwedi yomsebenzisi (kulokhu eyomlawuli) futhi uma sithola umyalezo ofana noka «Isexwayiso: Iphasiwedi yakho izophelelwa yisikhathi ezinsukwini ezingama-40 ngoMsombuluko ngoJulayi 14 13:57:10 2014» ukuthi liphume kahle.

Futhi kuze kube manje ingxenye yokuqala yesifundo. Sifunde kokulandelayo.