[SMS]

[rcastro]

I´ve installed SMS version 2.0.5 in my server and i´m pretend it to use it as AD.
The smb.conf example is incorrect, i found later the correct smb.conf that´s allow me to use smbclient -L localhost -U%
But, when i´m trying to prove host -t SRV _ldap._tcp.mydomain.com appears error 3(NXDOMAIN).
Looking in google for this error, indicates a list of port that should be open, like 88

if i use nmap -p 88 myip
Appear
88 tcp close kerberos

How may i open this port??

Thank's

[gerasimos_h]

If you are referring to default /etc/samba/smb.conf it's for standalone server and not for ADDC, there is an example at /etc/samba/smb.conf-domain.example but that's for reference since you need to run samba-tool.
Did you run "samba-tool domain provision" ?
Once you run it, it will create proper configs at /etc/samba/private

Have you look at those guides?
http://en.gentoo-wiki.com/wiki/Samba4_as_Active_Directory_Server
http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO

gerasimos_h

[rcastro]

Hi!!
Thank you for your support.

Yes, i did use samba-tool domain provision, and the smb.conf created send my error when i use smbclient -L localhost -U %
So, i must to edit this file to write: server services = smb, s3fs
With this, (after restart samba) smbclient -L localhost -U % is working
(but, if iuse smbclient //localhost/netlogon -UAdministrator%'<password>' -c 'ls' appear "samba internal error").
I've modify resolv,conf, hosts, named.conf. My DNS is working; but
host -t SRV _ldap._tcp.MYDOMAIN indicates NXDOMAIN(3).
In Google i've found that kerberos must be under firewall, but if i use
nmap -p 88 myip
indicates me that port 88 is closed.
How may i open this port???
Thank you. Sincerely Ricardo

[gerasimos_h]

Have you follow the guide in the docs, to create /etc/krb5.conf with your REALM.

[rcastro]

Help!!!
My brain is complete closed I can't understand what is happening. Please!!!! Help!!!
My resolv.conf is
domain ite.edu.mx
search ite.edu.mx
nameserver 10.10.10.253
nameserver 8.8.8.8
nameserver 8.8.4.4

My hosts is
127.0.0.1 localhost
192.168.4.210 ite ite.edu.mx
10.10.10.253 alumnos ite.edu.mx

The 10.10.10.253 is the internal IP,

My named.conf is
options {
directory "/var/named";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
files 4096;
managed-keys-directory "managed-keys";
empty-zones-enable yes;
};

//
// a caching only nameserver config
//
zone "." IN {
type hint;
file "caching-example/named.root";
};

zone "localhost" IN {
type master;
file "caching-example/localhost.zone";
allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
type master;
file "caching-example/named.local";
allow-update { none; };
};
zone "ite.edu.mx" {
type master;
file "/var/named/ite.edu.mx.hosts";
allow-transfer {127.0.0.1;};
};
zone "10.10.10.in-addr.arpa" {
type master;
file "/var/named/10.10.10.rev";
};
logging {
};

My smb.conf is
# Global parameters
[global]
workgroup = ITE
realm = ite.edu.mx
netbios name = ALUMNOS
server role = active directory domain controller
dns forwarder = 10.10.10.253
server services = smb,kdc,s3fs
passdb backend = samba4

[netlogon]
path = /var/lib/samba/sysvol/ite.edu.mx/scripts
read only = No

[sysvol]
path = /var/lib/samba/sysvol
read only = No

If i do smbclient -L localhost -U%
Domain=[ITE] OS=[Unix] Server=[Samba 4.0.8]

Sharename Type Comment
--------- ---- -------
netlogon Disk
sysvol Disk
IPC$ IPC IPC Service
Domain=[ITE] OS=[Unix] Server=[Samba 4.0.8]

Server Comment
--------- -------

Workgroup Master
--------- -------

But, if i use
root@ite:/etc/samba# smbclient //localhost/netlogon -UAdministrator% -c 'ls'
Anonymous login successful
Domain=[ITE] OS=[Unix] Server=[Samba 4.0.8]
tree connect failed: NT_STATUS_INTERNAL_ERROR

And then
root@ite:/etc/samba# host -t SRV _ldap._tcp.ite.edu.mx
Host _ldap._tcp.ite.edu.mx not found: 3(NXDOMAIN)

root@ite:/etc/samba# host -t SRV _kerberos._udp.ite.edu.mx
Host _kerberos._udp.ite.edu.mx not found: 3(NXDOMAIN)


root@ite:/etc/samba# host -t A alumnos.ite.edu.mx
alumnos.ite.edu.mx is an alias for ite.edu.mx.
ite.edu.mx has address 10.10.10.253


if i try smsconfig heimdal start

root@ite:/etc/samba# smsconfig heimdal start
root@ite:/etc/samba#
root@ite:/etc/samba# smsconfig heimdal status
Service heimdal [ Stopped ]

Please!!!! Help!!!!

[gerasimos_h]

OK! I see some weird configurations, that's for sure...
Anyway I 'll post my working configs, although for samba it's done by samba-tool...
It's clear that you were not reading the correct guides for samba4...

smb.conf

[rcastro]

Successful!!!

Thank you some much!!!! Without your help i couldn't do it!!!

Thank you. My Domain is now AD