Editando Samba4 (seção)

== Provision ==

Tem que resolver para o IP local.
 samba-tool domain provision --use-rfc2307 --interactive

Pós provisionamento
 ln -sf /var/lib/samba/private/krb5.conf /etc/krb5.conf

=== Pós provisionamento ===


==== Mudar o PATH ====

Edite:
 sudo vim /etc/profile

Adicione no FINAL do arquivo e salve-o:
 export PATH=$PATH:/usr/local/samba/bin:/usr/local/samba/sbin

Depois recarregue:
 source /etc/profile

Validando:
 which samba
 which samba-tool
 which smbclient

Deve retornar algo como:
 /usr/local/samba/sbin/samba
 /usr/local/samba/bin/samba-tool

==== Staus do Samba ====

 systemctl status samba-ad-dc
 systemctl start samba-ad-dc
 systemctl enable samba-ad-dc

==== Testar o domínio ==== 

 /usr/local/samba/bin/samba-tool domain level show

Esperado:
 Domain and forest function level for domain 'DC=rjgsnet,DC=local'
 
 Forest function level: (Windows) 2008 R2
 Domain function level: (Windows) 2008 R2
 Lowest function level of a DC: (Windows) 2008 R2

==== Testar autenticação local ====
 /usr/local/samba/bin/smbclient -L localhost -U Administrator

Vai pedir senha do <code>Administrator</code>

Esperado:
<pre>
 Password for [RJGSNET\Administrator]:

        Sharename       Type      Comment
        ---------       ----      -------
        sysvol          Disk
        netlogon        Disk
        IPC$            IPC       IPC Service (Samba 4.24.1)
 SMB1 disabled -- no workgroup available
 </pre>

==== Testar DNS ====

 host -t A rjgsnet.local

Esperando:
 rjgsnet.local has address 192.168.0.100

ou:

 /usr/local/samba/bin/samba-tool dns query localhost rjgsnet.local @ ALL

Esperando:
<pre>
Password for [administrator@RJGSNET.LOCAL]:
  Name=, Records=4, Children=0
    SOA: serial=1, refresh=900, retry=600, expire=86400, minttl=3600, ns=rjgs.rjgsnet.local., email=hostmaster.rjgsnet.local. (flags=600000f0, serial=1, ttl=3600)
    NS: rjgs.rjgsnet.local. (flags=600000f0, serial=1, ttl=900)
    A: 192.168.0.100 (flags=600000f0, serial=1, ttl=900)
    AAAA: 2804:014c:7983:9179:9a4b:e1ff:fe12:7d6f (flags=600000f0, serial=1, ttl=900)
  Name=_msdcs, Records=0, Children=0
  Name=_sites, Records=0, Children=1
  Name=_tcp, Records=0, Children=4
  Name=_udp, Records=0, Children=2
  Name=DomainDnsZones, Records=0, Children=2
  Name=ForestDnsZones, Records=0, Children=2
  Name=rjgs, Records=2, Children=0
    A: 192.168.0.100 (flags=f0, serial=1, ttl=900)
    AAAA: 2804:014c:7983:9179:9a4b:e1ff:fe12:7d6f (flags=f0, serial=1, ttl=900)
</pre>

==== Testar Kerberos ====

 kinit Administrator

Esperado:
 Password for Administrator@RJGSNET.LOCAL:
 Warning: Your password will expire in 41 days on Sun 21 Jun 2026 12:41:52 AM -03

Depois:

 klist

Esperado:
<pre>
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: Administrator@RJGSNET.LOCAL

Valid starting       Expires              Service principal
05/10/2026 01:14:47  05/10/2026 11:14:47  krbtgt/RJGSNET.LOCAL@RJGSNET.LOCAL
        renew until 05/11/2026 01:14:40
</pre>

====  Testar usuários ====
 /usr/local/samba/bin/samba-tool user list

Esperado: Deve listar os usuários iniciais

 Administrator
 Guest
 krbtgt