Implementing Samba 4 Book
Implementing Samba 4
Wow! That was a long journey…
From lights out to the finish line, from the first blank page to the credits… yes, it was a long journey!
In the end, the most important part is that it was worth every word, chapter, and every script. And I would like to say thank you for Packt Publishing for let me participate on this project, thanks for all the editing and technical reviewers and for all the Samba Community!
I’m really happy and honored of being part of this book and try to facilitate the adoption of this great Open Source Project that is the Samba Software.
It’s not a “Samba Bible” or a “Reference Guide”… it’s a practical book that for sure will help you to get things done quickly and effectively. Following the Packt Publishing Style and tradition, it’s a book that is practical from the beginning, and the reader will have code, examples and automation scripts from the start without further ado.
If you want to understand all the config options of the Samba 4 Software, or an extensive theory about it, this book is not for you. But if you want to get things rolling and in effective and quick way, that’s your book. From deploying an GNU/Linux as an Active Directory Domain Controller, a Member Server, or implementing a Highly Available File Server, that’s the book.
Full of examples and tips, not just about Samba 4 and Network Services, but about many aspects of the System Administration role. I did try to explain and pass much of my many years deploying, administering, and designing Highly Available and Resilient solutions. Every time I could pass some experience of what worked or what not worked fine for me, I was very explicit and gave my specific point of view on the matter. So, the customer can have some real world experience and decide what is the best approach and take some facts to help the decision.
Hope you enjoy and feel free to comment and send me emails with your opinion, critics or any other “line” about the book!
Here you can get a sample chapter of the book, go get it!
peace
Hi,
I buy your book “Implementing Samba 4.”
I configure Samba4 and I can not connect to kerberos
kinit Administrator@TADKOWO.LOCAL
kinit: Cannot contact any KDC for realm 'TADKOWO.LOCAL' while getting initial credentials
ldapsearch -x -h localhost -s Base -D cn=Administrator,cn=Users,dc=TADKOWO,dc=LOCAL -WEnter LDAP Password:
# extended LDIF
#
# LDAPv3
# base (default) with scope baseObject
# filter: (objectclass=*)
# requesting: ALL
#
#
dn:
configurationNamingContext: CN=Configuration,DC=tadkowo,DC=local
defaultNamingContext: DC=tadkowo,DC=local
rootDomainNamingContext: DC=tadkowo,DC=local
schemaNamingContext: CN=Schema,CN=Configuration,DC=tadkowo,DC=local
subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=tadkowo,DC=local
supportedCapabilities: 1.2.840.113556.1.4.800
supportedCapabilities: 1.2.840.113556.1.4.1670
supportedCapabilities: 1.2.840.113556.1.4.1791
supportedCapabilities: 1.2.840.113556.1.4.1935
supportedCapabilities: 1.2.840.113556.1.4.2080
supportedLDAPVersion: 2
supportedLDAPVersion: 3
vendorName: Samba Team (https://samba.org)
isSynchronized: TRUE
dsServiceName: CN=NTDS Settings,CN=WHEEZY,CN=Servers,CN=Default-First-Site-Nam
e,CN=Sites,CN=Configuration,DC=tadkowo,DC=local
serverName: CN=WHEEZY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Config
uration,DC=tadkowo,DC=local
dnsHostName: wheezy.tadkowo.local
ldapServiceName: tadkowo.local:wheezy$@TADKOWO.LOCAL
currentTime: 20141028235255.0Z
supportedControl: 1.2.840.113556.1.4.841
supportedControl: 1.2.840.113556.1.4.319
supportedControl: 1.2.840.113556.1.4.473
supportedControl: 1.2.840.113556.1.4.1504
supportedControl: 1.2.840.113556.1.4.801
supportedControl: 1.2.840.113556.1.4.801
supportedControl: 1.2.840.113556.1.4.805
supportedControl: 1.2.840.113556.1.4.1338
supportedControl: 1.2.840.113556.1.4.529
supportedControl: 1.2.840.113556.1.4.417
supportedControl: 1.2.840.113556.1.4.2064
supportedControl: 1.2.840.113556.1.4.1413
supportedControl: 1.2.840.113556.1.4.1413
supportedControl: 1.2.840.113556.1.4.1413
supportedControl: 1.2.840.113556.1.4.1413
supportedControl: 1.2.840.113556.1.4.1413
supportedControl: 1.2.840.113556.1.4.1339
supportedControl: 1.2.840.113556.1.4.1340
supportedControl: 1.2.840.113556.1.4.1413
supportedControl: 1.2.840.113556.1.4.1341
namingContexts: DC=tadkowo,DC=local
namingContexts: CN=Configuration,DC=tadkowo,DC=local
namingContexts: CN=Schema,CN=Configuration,DC=tadkowo,DC=local
namingContexts: DC=DomainDnsZones,DC=tadkowo,DC=local
namingContexts: DC=ForestDnsZones,DC=tadkowo,DC=local
supportedSASLMechanisms: GSS-SPNEGO
supportedSASLMechanisms: GSSAPI
supportedSASLMechanisms: NTLM
highestCommittedUSN: 3768
domainFunctionality: 2
forestFunctionality: 2
domainControllerFunctionality: 4
isGlobalCatalogReady: TRUE
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
root@wheezy:~# wbinfo -u
Administrator
Guest
krbtgt
root@wheezy:~# host -t SRV _kerberos._udp.TADKOWO.LOCAL
_kerberos._udp.TADKOWO.LOCAL has SRV record 0 100 88 wheezy.tadkowo.local.
root@wheezy:~# host -t SRV _ldap._tcp.TADKOWO.LOCAL
_ldap._tcp.TADKOWO.LOCAL has SRV record 0 100 389 wheezy.tadkowo.local.
Hi there!
First of all, thanks for giving your feedback and contacting here. Regarding your issue, have you followed the procedure as is on the book? What distro and samba 4 specific versions?
OS: Debian Wheezy
Samba: stable 4.1.13 (on samba 4.0 does not pass the test,at 4.1 also but ignored and done make install)
It seems that everything works except Kerberos.
netstat command -lanup shows, however, that kerberos is listening
Another issue (which I advised myself) with the UUID in / etc / fstab. not every entry can start with the UUID (in wheezy I had a simple path to the script and I did not replace the entry)
Is this book can be helpful?
This is too good a book to contain as many typos and errors as it does. There is a negative review on Amazon where I bought the book complaining about typos and errors. The reviewer is right about the errors but is way off the mark about giving it a 1 star review.
A bit of cleanup or a more extensive downloadable file of examples is in order.
At location 348 in the Kindle edition:
sudo apt-get install build-essential python-dev cups krb5-user docbook-xsl libldap2-dev libattr1-dev libacl1-dev libgnutls28-dev attr python-dnspython libreadline-dev libbsd-dev libblkid-dev libpopt-dev cups git acl gdb xsltproc libsasl2-dev libaio-dev libpam-dev valgrind resolvconf autoconf ldaputils ntp isc-dhcp-server EE echo OK
is the correct script in Debian 8. It took a bit of typing to get it right. At location 394 starting at FFILE=/etc/fstab; […]; I would suggest breaking up the long extended command into shorter, readable pieces.
Thanks for your attention.
Paul
Hi Paul, thanks alot for your comment, and be sure that I take every comment seriously. Glad you found my book usefull regardless of the typos. ;-) It’s not easy to get scripts formatted right for a book, and I have validated every single one of them, but even so I could find some that were with the wrong character (e.g.: ‘ ) maybe because of “copy and past” in diff charsets. I have full annotations I did just after the book was published, and do need to get them upstream.
Thanks again!!
@helloworld
remove resolvcong in apt-get.
its resolve de problem.
When the version 2 will arrive —- Implementing Samba 4 ?