User Tools

Site Tools


user:thakes3:portfolio:misc:sambadc

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
user:thakes3:portfolio:misc:sambadc [2014/05/19 17:37] – created thakes3user:thakes3:portfolio:misc:sambadc [2014/05/29 21:03] (current) thakes3
Line 10: Line 10:
  
 I started by rolling a brand new debian VM, for this i will call it nixDC. nixDC will have a Samba setup tied into OpenLDAP for the ability to roll out backup domain controllers, and also in multiple locations as well. I started by rolling a brand new debian VM, for this i will call it nixDC. nixDC will have a Samba setup tied into OpenLDAP for the ability to roll out backup domain controllers, and also in multiple locations as well.
 +
 +**/etc/hosts make sure your FQDM is set right or else you will mess up**
 +
 +<cli>
 +# aptitude install slapd ldap-utils
 +</cli>
 +
 +enter new admin password, make sure you remember it
 +
 +<cli>
 +# emacs /etc/ldap/ldap.conf
 +</cli>
 +
 +<code>
 +#
 +# LDAP Defaults
 +#
 +# See ldap.conf(5) for details
 +# This file should be world readable but not world writable.
 +BASE    dc=fhm,dc=cist
 +URI     ldap://server.fhm.cist ldap://server.fhm.cist:666
 +#SIZELIMIT      12
 +#TIMELIMIT      15
 +#DEREF          never
 +# TLS certificates (needed for GnuTLS)
 +TLS_CACERT      /etc/ssl/certs/ca-certificates.crt
 +</code>
 +
 +re-run auto configger
 +
 +<cli>
 +# dpkg-reconfigure slapd
 +</cli>
 +
 +**omit OpenLDAP server configuration** no
 +
 +**enter DNS name** fhm.cist
 +
 +**organization name** nixDC
 +
 +**admin password** -- type it again
 +
 +**database backend** HDB
 +
 +**do you want the database to be purged** no
 +
 +**move old database?** yes
 +
 +**allow LDAPv2 protocol?** no
 +
 +
 +ldapsearch -x should now report back data, if not something's wrong
 +
 +====Phase2: phpldapadmin====
 +
 +**this was a bitch to figure out the easiest way**
 +
 +<cli>
 +# aptitude install phpldapadmin apache2 php5 php5-fpm
 +</cli>
 +
 +<cli>
 +# rm -rf /etc/phpldapadmin/config.php
 +# dpkg-reconfigure phpldapadmin
 +</cli>
 +
 +type all the right stuff, broadcasting now on port 80
 +
 +<cli>
 +# ln -s /usr/share/phpldapadmin/ /var/www/phpldapadmin
 +</cli>
 +
 +====Phase 3: make user acc stuff i guess====
 +
 +  * login as admin credz 
 +  * create new group name it sales or something
 +  * create sub group name it sales-people or something
 +  * create user account for login name it salesguy or something
 +
 +=====Phase 4: typing things to make samba work with ldap=====
 +
 +
 +
 +======Usefull shit======
 +
 +http://www.unixmen.com/openldap-installation-configuration-ubuntu-12-1013-0413-10-debian-67/
 +
user/thakes3/portfolio/misc/sambadc.1400521059.txt.gz · Last modified: 2014/05/19 17:37 (external edit)