Create SAMBA Domain - Versionsgeschichte

192.168.0.10 am 4. August 2012 um 13:11 Uhr

2012-08-04T13:11:20Z

← Nächstältere Version		Version vom 4. August 2012, 13:11 Uhr
Zeile 49:		Zeile 49:

	TODO : check why with ldapsam:trusted machine accounts still wont get their credentials		TODO : check why with ldapsam:trusted machine accounts still wont get their credentials
			TODO : check that algorithmic rid base shit

192.168.0.10 am 3. August 2012 um 23:50 Uhr

2012-08-03T23:50:35Z

← Nächstältere Version		Version vom 3. August 2012, 23:50 Uhr
Zeile 7:		Zeile 7:
	net rpc rights grant domadmin SeMachineAccountPrivilege -U domadmin		net rpc rights grant domadmin SeMachineAccountPrivilege -U domadmin

			-- WARNING : run smbldap-populate beforehand ----> DO NOT CHANGE ROOT PW --
	3. join XP machine to domain		3. join XP machine to domain

192.168.0.10 am 3. August 2012 um 23:14 Uhr

2012-08-03T23:14:33Z

← Nächstältere Version		Version vom 3. August 2012, 23:14 Uhr
Zeile 14:		Zeile 14:
	3a. join WINDOWS 7 machine to domain		3a. join WINDOWS 7 machine to domain

	Change		Change (Both Keys do not exist on a fresh install)
	HKLM\System\CCS\Services\LanmanWorkstation\Parameters		HKLM\System\CCS\Services\LanmanWorkstation\Parameters
	DWORD DomainCompatibilityMode = 1		DWORD DomainCompatibilityMode = 1
Zeile 23:		Zeile 23:
	TODO: check why join domain twice		TODO: check why join domain twice

			----> smbldap-tools Version 0.9.8 required. 0.9.4-r1 doesn't have the -W flag.

	CREATING Domain Users:		CREATING Domain Users:

192.168.0.114 am 10. November 2010 um 01:59 Uhr

2010-11-10T01:59:12Z

@@ Zeile 1: / Zeile 1: @@
 . Create a Domain Administrator Account on Domain Server
@@ Zeile 12: / Zeile 11: @@
 Control Panel-> System -> Network Identification -> Enter Domain Name, then enter user/pass for domadmin
                    must be done twice, 1st error "Benutzername konnte nicht gefunden werden, 2nd time it works
 CREATING Domain Users:
@@ Zeile 26: / Zeile 37: @@
    ( add user script in this case was : /usr/sbin/smbldap-useradd -B 1 -m "%u" )
    - TODO : check samba's Domain Users Group membership
 . Log on as the new user

192.168.0.114: Die Seite wurde neu angelegt: „ 1. Create a Domain Administrator Account on Domain Server smbldap-useradd -a -c "Domain Administrator" -d /home/domadmin -g 512 -m -s /bin/bash -H [UHX] -N "Dom…“

2010-11-10T01:00:13Z

Die Seite wurde neu angelegt: „ 1. Create a Domain Administrator Account on Domain Server smbldap-useradd -a -c "Domain Administrator" -d /home/domadmin -g 512 -m -s /bin/bash -H [UHX] -N "Dom…“

Neue Seite

1. Create a Domain Administrator Account on Domain Server

smbldap-useradd -a -c "Domain Administrator" -d /home/domadmin -g 512 -m -s /bin/bash -H [UHX] -N "Domain Administrator" -P domadmin

2. Grant user domadmin Domain joining rights

net rpc rights grant domadmin SeMachineAccountPrivilege -U domadmin

3. join XP machine to domain

Control Panel-> System -> Network Identification -> Enter Domain Name, then enter user/pass for domadmin
must be done twice, 1st error "Benutzername konnte nicht gefunden werden, 2nd time it works

CREATING Domain Users:

4. Grant user domadmin user modification rights

net rpc rights grant domadmin SeAddUsersPrivilege -U domadmin

5. Log on onto domain as domuser

6. add an user to the domain

net user add donald test /add /domain
( add user script in this case was : /usr/sbin/smbldap-useradd -B 1 -m "%u" )
- TODO : check samba's Domain Users Group membership

7. Log on as the new user