samba - Apr 2020 - Any advice for installing Samba as an AD server on Raspbian Buster with BIND9 and ISC DHCP?

On 06/04/2020 19:53, Rick Hollinbeck wrote:
> My dhcpcd.conf specifies a fixed ip for eth0, but I don't really know
how well it will play with
> bind9 and samba.
> I think I'll take your advice here.
I understand why Raspbian uses dhcpcd, it makes it easier for them, but 
I see no good reason to use it on something that should have a fixed 
ipaddress.
>
> I'm also worried the resolv.conf is getting rewritten and I think
I'll
> want to edit that one manually as well for bind9 and samba, correct?
The best way would be to find whatever is rewriting /etc/resolv.conf 
(dnsmasq ?) and stop it.
>
>>> (The Samba wiki seems out of date.)
>> Can you point to examples of 'out-of-dateness' ??
>>
>> If there are any, I will update them.
> If I remember right from the last time I set up Samba (a few months ago)
some of the folder
> locations didn't reflect the newer locations that Samba now uses to
simplify file premissions
> for the bind9 user account, but this might be fixed now.
Good point, I will check ;-)
> (BTW, https://wiki.samba.org/index.php/Setting_up_a_BIND_DNS_Server refers
to this user
> as both 'bind' and 'named'. I think named is the one I saw
bind9 using when installed.)
Problem is, both names are valid, the red-hat distros use 'named' and 
Debian distros use 'bind', but I will see if I can make this easier to 
understand ;-)

Thanks for pointing these out.
>
> I'll try to note specific things in the wiki that seem out of date or
confusing as I proceed and
> let you know.
Thanks, but please be aware that we try to be distro
neutral.
>
>
> Louis's how-to really helped me out when I installed samba on Ubuntu.
> I'll try to write up my own notes for Raspbian as I go...
>
> These are the packages Louis installs on Ubuntu - are they best for
Raspbian, also?
>
> # The Samba 4.11 package for Raspbian on Louis's site....
> apt install samba winbind krb5-user
> #(optional must often used so install it. )
> apt install libnss-winbind  libpam-winbind
> #for the time sync in samba we need ntp or chrony.
> #Prepare time ( I preffer ntp.)
> apt install ntp
> #Prepare DNS ( I preffer bind9 )
> apt install bind9
> # and add some tools you might need.
> apt install binutils ldb-tools smbclient
> apt install libpam-krb5
>
> Anything missing here?
acl & attr ?

Rowland

Thanks for your advice, Rowland
> > Yes, I am setting up a new Samba-based AD DC.
> If you are joining? to an existing domain, then you cannot be setting up 
> a new domain ;-)
Yes - joining a new DC to an existing domain.
> > Should I install BIND9 and DHCP first, then install Samba and do the
join?
> 
> I personally would do it in stages, set up the Rpi, add Louis's repo
and
> then join the AD domain.
> 
> Install Bind9 and upgrade to bind9_dlz, finally install and configure dhcp.
That's what I was wondering... I'll do the join first with the internal
Samba dns server
then upgrade it to bind9_dlz.
> There is a lot of difference between Raspbian and Ubuntu, Raspbian uses 
> dhcpcd and Ubuntu uses netplan for instance.
> 
> If I was doing this (I use my Rpi4 as a Unix domain member), I would 
> remove dhcpcd and then set a fixed ip the old-school way with 
> /etc/network/interfaces.
My dhcpcd.conf specifies a fixed ip for eth0, but I don't really know how
well it will play with
bind9 and samba.
I think I'll take your advice here.

I'm also worried the resolv.conf is getting rewritten and I think I'll
want to edit that one manually as well for bind9 and samba, correct?
> 
> > (The Samba wiki seems out of date.)
> 
> Can you point to examples of 'out-of-dateness' ??
> 
> If there are any, I will update them.
If I remember right from the last time I set up Samba (a few months ago) some of
the folder
locations didn't reflect the newer locations that Samba now uses to simplify
file premissions
for the bind9 user account, but this might be fixed now.
(BTW, https://wiki.samba.org/index.php/Setting_up_a_BIND_DNS_Server refers to
this user
as both 'bind' and 'named'. I think named is the one I saw bind9
using when installed.)

I'll try to note specific things in the wiki that seem out of date or
confusing as I proceed and
let you know.
> > I was hoping there was somethiing more specific to Raspbian.
> Bit of a niche market (yes, I know just how many of them there are) and 
> the wiki is meant as general info on Samba and not committed to any 
> particular distro.
Louis's how-to really helped me out when I installed samba on Ubuntu.
I'll try to write up my own notes for Raspbian as I go...

These are the packages Louis installs on Ubuntu - are they best for Raspbian,
also?

# The Samba 4.11 package for Raspbian on Louis's site....
apt install samba winbind krb5-user
#(optional must often used so install it. )
apt install libnss-winbind  libpam-winbind
#for the time sync in samba we need ntp or chrony. 
#Prepare time ( I preffer ntp.) 
apt install ntp
#Prepare DNS ( I preffer bind9 )
apt install bind9
# and add some tools you might need.
apt install binutils ldb-tools smbclient 
apt install libpam-krb5

Anything missing here?
> If you get stuck or are unsure, just ask ;-)
> 
> Rowland
Thanks for your help!
(Stay safe,,,)

-Rick

Mandi! Rowland penny via samba
  In chel di` si favelave...
> > My dhcpcd.conf specifies a fixed ip for eth0, but I don't really
know how well it will play with
> > bind9 and samba.
> > I think I'll take your advice here.
> I understand why Raspbian uses dhcpcd, it makes it easier for them, but I
> see no good reason to use it on something that should have a fixed
> ipaddress.
AFAIK raspbian ignore /etc/network/interfaces at all, you have to:

	apt-get purge dhcpcd5 openresolv

then edit /etc/network/interfaces and /etc/resolv.conf, then reboot.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bont?, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)