Skip to main content

Ajout d'un serveur à l'active directory

Prérequis

  • Avoir un serveur linux
  • Mettre les serveur active directory en tant que serveur DNS
  • Mettre le domaine de recherche
  • Avoir un nom de serveur respectant la bonne nomenclature

Installation des paquets nécessaire

  • Installer le serveur de temps NTP:
    apt -y install ntprealmd sssd sssd-tools libnss-sss libpam-sss adcli samba-common-bin oddjob oddjob-mkhomedir packagekit
Paramétrer le serveur NTP
  • Commenter les pools
Ajouter le(s) serveur(s) active directory

image.png

Redémarrer le serveur NTP:
systemctl restart ntpd.service
Installer les paquets nécéssaire
apt install krb5-user libpam-krb5 libpam-ccreds samba winbind ntp
Paramétrer le fichier /etc/krb5.conf
 
[libdefaults]
        default_realm = MEGAPRODUCTION.LOCAL

# The following krb5.conf variables are only for MIT Kerberos.
        kdc_timesync = 1
        ccache_type = 4
        forwardable = true
        proxiable = true
        rdns = false


# The following libdefaults parameters are only for Heimdal Kerberos.
        fcc-mit-ticketflags = true

[realms]
        DOMAIN.COM = {
        kdc            =       megaproduction.local  # domain specific parameter (domain controller name)
        admin_server   =       megaproduction.local  # domain specific parameter (domain controller name)
        default_domain =       DOMAIN.COM         # domain specific parameter (full domain name)
        }
[domain_realm]
        .domain.com = MEGAPRODUCTION.LOCAL  # domain specific parameter (domain name for dns names)
        domain.com = MEGAPRODUCTION.LOCAL   # domain specific parameter (domain name for dns names)
~
Paramétrer le fichier /etc/samba/smb.conf et y ajouter  (en supprimant les doublons)
[global]
   workgroup = DOMAIN                   # domain specific parameter (short domain name)
   realm = DOMAIN.COM                 # domain specific parameter (full domain name)
   security = ADS
   encrypt passwords = true
   socket options = TCP_NODELAY
   domain master = no
   local master = no
   preferred master = no
   os level = 0
   domain logons = 0
   server string = %h server (Samba, Ubuntu)
   dns proxy = no
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   server role = standalone server
   passdb backend = tdbsam
   obey pam restrictions = yes
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   map to guest = bad user
   usershare allow guests = yes

Joindre le domain
net ads join -U Administrator

Retour de la commande si tout se passe bien:

image.png
Le serveur est ajouté sur l'active directory !!

Back to top