CentOS - Jan 2020 - Can I configure CentOS 8.1 1911 as an Active Directory Domain Controller like a Windows Server?

Hi,

Thank you for your prompt reply.

The guide which you have shared looks very detailed.

I have also found another guide at samba.org but not very sure whether
it is good.

Title: Setting up Samba as an Active Directory Domain Controller

Link:
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller


On Wed, 22 Jan 2020 at 21:39, Gianluca Cecchi <gianluca.cecchi at
gmail.com> wrote:
>
> On Wed, Jan 22, 2020 at 2:32 PM Turritopsis Dohrnii Teo En Ming <
> teo.en.ming.smartphone at gmail.com> wrote:
>
> > Good evening from Singapore,
> >
> > Can I configure CentOS 8.1 1911 as an Active Directory Domain
> > Controller like a Windows Server?
> >
> > Are there any good guides or tutorials on how to do this?
> >
> > Thank you very much.
> >
> >
> I would start here:
>
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_using-samba-as-a-server_deploying-different-types-of-servers
>
> HIH,
> Gianluca
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link:
https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************

Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
Qualifications as at 14 Feb 2019 and refugee seeking attempts at the
United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug
2019) and Australia (25 Dec 2019 to 9 Jan 2020):

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----

Oh dear,

The Red Hat guide says:

"Red Hat does not support running Samba as an AD domain controller
(DC)."

If RHEL 8.1 does not support running Samba as an AD domain controller
(DC), will CentOS 8.1 support running Samba as an AD domain controller
(DC)?



On Wed, 22 Jan 2020 at 21:49, Turritopsis Dohrnii Teo En Ming
<teo.en.ming.smartphone at gmail.com> wrote:
>
> Hi,
>
> Thank you for your prompt reply.
>
> The guide which you have shared looks very detailed.
>
> I have also found another guide at samba.org but not very sure whether
> it is good.
>
> Title: Setting up Samba as an Active Directory Domain Controller
>
> Link:
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
>
>
> On Wed, 22 Jan 2020 at 21:39, Gianluca Cecchi <gianluca.cecchi at
gmail.com> wrote:
> >
> > On Wed, Jan 22, 2020 at 2:32 PM Turritopsis Dohrnii Teo En Ming <
> > teo.en.ming.smartphone at gmail.com> wrote:
> >
> > > Good evening from Singapore,
> > >
> > > Can I configure CentOS 8.1 1911 as an Active Directory Domain
> > > Controller like a Windows Server?
> > >
> > > Are there any good guides or tutorials on how to do this?
> > >
> > > Thank you very much.
> > >
> > >
> > I would start here:
> >
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_using-samba-as-a-server_deploying-different-types-of-servers
> >
> > HIH,
> > Gianluca
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > https://lists.centos.org/mailman/listinfo/centos
>
> -----BEGIN EMAIL SIGNATURE-----
>
> The Gospel for all Targeted Individuals (TIs):
>
> [The New York Times] Microwave Weapons Are Prime Suspect in Ills of
> U.S. Embassy Workers
>
> Link:
https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html
>
>
********************************************************************************************
>
> Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
> Qualifications as at 14 Feb 2019 and refugee seeking attempts at the
> United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug
> 2019) and Australia (25 Dec 2019 to 9 Jan 2020):
>
> [1] https://tdtemcerts.wordpress.com/
>
> [2] https://tdtemcerts.blogspot.sg/
>
> [3] https://www.scribd.com/user/270125049/Teo-En-Ming
>
> -----END EMAIL SIGNATURE-----

On Wed, Jan 22, 2020 at 2:50 PM Turritopsis Dohrnii Teo En Ming <
teo.en.ming.smartphone at gmail.com> wrote:
> Hi,
>
> Thank you for your prompt reply.
>
> The guide which you have shared looks very detailed.
>
> I have also found another guide at samba.org but not very sure whether
> it is good.
>
> Title: Setting up Samba as an Active Directory Domain Controller
>
> Link:
>
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
>
>
>
Take note that on the link I provided there is the statement that it is not
supported (on Red Hat) with the role of AD DC.
I don't know if it is more a limitation for support effort by Red Hat or at
all, also because here you can find a note for Ubuntu where it states it
does support that role on Samba4:
https://www.tecmint.com/install-samba4-active-directory-ubuntu/

So if you are "forced" to use CentOS you can try to inter-mix the
information provided by the two links and see if it works.
Gianluca

Thanks for the Ubuntu guide!

On Wed, 22 Jan 2020 at 21:57, Gianluca Cecchi <gianluca.cecchi at
gmail.com> wrote:
>
> On Wed, Jan 22, 2020 at 2:50 PM Turritopsis Dohrnii Teo En Ming <
> teo.en.ming.smartphone at gmail.com> wrote:
>
> > Hi,
> >
> > Thank you for your prompt reply.
> >
> > The guide which you have shared looks very detailed.
> >
> > I have also found another guide at samba.org but not very sure whether
> > it is good.
> >
> > Title: Setting up Samba as an Active Directory Domain Controller
> >
> > Link:
> >
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
> >
> >
> >
> Take note that on the link I provided there is the statement that it is not
> supported (on Red Hat) with the role of AD DC.
> I don't know if it is more a limitation for support effort by Red Hat
or at
> all, also because here you can find a note for Ubuntu where it states it
> does support that role on Samba4:
> https://www.tecmint.com/install-samba4-active-directory-ubuntu/
>
> So if you are "forced" to use CentOS you can try to inter-mix the
> information provided by the two links and see if it works.
> Gianluca
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link:
https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************

Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
Qualifications as at 14 Feb 2019 and refugee seeking attempts at the
United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug
2019) and Australia (25 Dec 2019 to 9 Jan 2020):

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----

On Wed, Jan 22, 2020 at 09:49:45PM +0800, Turritopsis Dohrnii Teo En Ming
wrote:
> I have also found another guide at samba.org but not very sure whether
> it is good.
> 
> Title: Setting up Samba as an Active Directory Domain Controller
> 
> Link:
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
This guide says to use Samba built against Heimdal.  The Samba in
RHEL/CentOS is built against MIT Kerberos, so you'd need to rebuild
Samba.  There is experimental support for using MIT Kerberos as a DC,
if you're willing to risk it.

Also, with a quick glance over the CentOS8 spec file for Samba, it
builds samba without the Domain Controller configure flag by default.
(Look at the with_dc RPM spec variable here:
https://git.centos.org/rpms/samba/blob/c8/f/SPECS/samba.spec )

It looks like if you want to run an AD DC on CentOS, you'll need to
find some other packages or maintain them yourself.  Good luck.

-- 
Jonathan Billings <billings at negate.org>

On Wed, 22 Jan 2020, Turritopsis Dohrnii Teo En Ming wrote:
> Hi,
>
> Thank you for your prompt reply.
>
> The guide which you have shared looks very detailed.
>
> I have also found another guide at samba.org but not very sure whether
> it is good.
>
> Title: Setting up Samba as an Active Directory Domain Controller
>
> Link:
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
On Centos 7 I use the above link which also should work on 8. If you want to
build rpms, there is also https://github.com/nkadel?tab=repositories

I am not aware of any pre-build rpms for a DC on Centos 8 but there are some for
Centos 7 but I have never used them.

Red Hat has stated they will not support a Samba DC on RHEL therefore it will
not be supported on Samba.

I would also suggest subscribing to the Samba users mailing list @ samba.org as 
the people there are very good at supporting Samba as a DC.

My one warning to you is unless you wish to inflict large amounts of pain
on yourself do not build Samba using MIT Kerberos. It is unmaintained and
unsupported by the Samba Team or anyone else that I am aware of.

Regards,

-- 
Tom			me at tdiehl.org