samba - Sep 2017 - Setting up Samba AD-DC on Debian Stretch made easy.

L.P.H. van Belle wrote on Mon Sep 11 11:06:56 UTC 2017:
> Hai,
>
> As im setting up a new test environment, i've documented my setups and
here you go..  
> A easy to follow howto for a Debian Samba AD DC  ( tested on Debian
Stretch, but should works also on Jessie ) 
> 
> You can find the files, here: 
> https://github.com/thctlo/samba4  In the "howtos" folder are the
files.
[snip]

Louis,

Many thanks for your helpful scripts and howto's.

In your howto: stretch-base-2-samba-minimal-ad.txt, I found the following
issues:

Lines 17 to 37:  smbclient is needed when testing later, so install it here
along with the other packages?

Line 252 to 259: The path to /etc/bind or /etc is missing in these sed
lines.

Line 287:  the variable SAMBA_NT_ADMIN is undefined when you use it here.
Presumably it should be set to "Administrator"  prior to this command?

Keep up the good work!

Regards,

Roy

Hai Roy,

I've applied the the correct paths as reported. 

Thanks!! For reporting this. 


Greetz, 

Louis
 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> spindles7 via samba
> Verzonden: dinsdag 12 september 2017 12:03
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Setting up Samba AD-DC on Debian 
> Stretch made easy.
> 
> L.P.H. van Belle wrote on Mon Sep 11 11:06:56 UTC 2017:
> 
> > Hai,
> >
> > As im setting up a new test environment, i've documented my 
> setups and
> here you go..  
> > A easy to follow howto for a Debian Samba AD DC  ( tested on Debian
> Stretch, but should works also on Jessie ) 
> > 
> > You can find the files, here: 
> > https://github.com/thctlo/samba4  In the "howtos" folder 
> are the files. 
> 
> [snip]
> 
> Louis,
> 
> Many thanks for your helpful scripts and howto's.
> 
> In your howto: stretch-base-2-samba-minimal-ad.txt, I found 
> the following
> issues:
> 
> Lines 17 to 37:  smbclient is needed when testing later, so 
> install it here along with the other packages?
> 
> Line 252 to 259: The path to /etc/bind or /etc is missing in 
> these sed lines.
> 
> Line 287:  the variable SAMBA_NT_ADMIN is undefined when you 
> use it here.
> Presumably it should be set to "Administrator"  prior to this
command?
> 
> Keep up the good work!
> 
> Regards,
> 
> Roy
> 
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Tue, 12 Sep 2017 11:03:14 +0100
spindles7 via samba <samba at lists.samba.org> wrote:
> L.P.H. van Belle wrote on Mon Sep 11 11:06:56 UTC 2017:
> 
> > Hai,
> >
> > As im setting up a new test environment, i've documented my setups
> > and
> here you go..  
> > A easy to follow howto for a Debian Samba AD DC  ( tested on Debian
> Stretch, but should works also on Jessie ) 
> > 
> > You can find the files, here: 
> > https://github.com/thctlo/samba4  In the "howtos" folder are
the
> > files. 
> 
> [snip]
> 
> Louis,
> 
> Many thanks for your helpful scripts and howto's.
> 
> In your howto: stretch-base-2-samba-minimal-ad.txt, I found the
> following issues:
> 
> Lines 17 to 37:  smbclient is needed when testing later, so install
> it here along with the other packages?
> 
> Line 252 to 259: The path to /etc/bind or /etc is missing in these sed
> lines.
> 
> Line 287:  the variable SAMBA_NT_ADMIN is undefined when you use it
> here. Presumably it should be set to "Administrator"  prior to
this
> command?
> 
> Keep up the good work!
> 
> Regards,
> 
> Roy
> 
> 
> 
> 
The problem isn't that 'SAMBA_NT_ADMIN' isn't set, it is, but to
'SAMBA_NT_DOMAIN' instead, see lines 278 & 279

Rowland

On Tue, 12 Sep 2017 13:00:17 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> Hai Roy,
> 
> I've applied the the correct paths as reported. 
> 
> Thanks!! For reporting this. 
> 
> 
Sorry Louis, but it doesn't make sense to use a variable called
'SAMBA_NT_DOMAIN' for an ADMIN user.

Rowland

Hai Rowland, 

Now, dont be sorry, i ask for this ;-). Is good to see and hear people use it. 
Everything that can be improved, i'll listen to and think about it.

This was a "copy past" from an other script, so yes, this one is an
easy change.
# Enable one of these two. 
#SAMBA_NT_DOMAIN="BUILTIN\Administrators" 
#SAMBA_NT_DOMAIN="$(cat /etc/samba/smb.conf | grep workgroup | awk '{
print $NF}')\Domain Admins"

So, i've changed it to ... 
# You can only enable one of these two at once, if you want both groups, run it,
change it and run it again.
SAMBA_DC_ADMIN_GROUP_CHOICE="BUILTIN\Administrators"
SAMBA_DC_ADMIN_GROUP_CHOICE="$(cat /etc/samba/smb.conf | grep workgroup |
awk '{ print $NF}')\Domain Admins"

Yes, i know long variable name, but that makes merging all script much easier. 

.. Its changed, if you have a better way to describe this, you know.. Let me
know.
Your the Englishman here :-p 
;-) 


Greetz, 

Louis
 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland Penny via samba
> Verzonden: dinsdag 12 september 2017 13:14
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Setting up Samba AD-DC on Debian 
> Stretch made easy.
> 
> On Tue, 12 Sep 2017 13:00:17 +0200
> "L.P.H. van Belle via samba" <samba at lists.samba.org>
wrote:
> 
> > Hai Roy,
> > 
> > I've applied the the correct paths as reported. 
> > 
> > Thanks!! For reporting this. 
> > 
> > 
> 
> Sorry Louis, but it doesn't make sense to use a variable 
> called 'SAMBA_NT_DOMAIN' for an ADMIN user.
> 
> Rowland
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>