HOME

Return to SambAD

The SambaAD server is a TemplateVM clone. See installation TemplateVM.

Selinux must be and will always be "permissive".
vi /etc/crontab

@reboot root setenforce 0  

Important.
You need a Windows 11 Pro to administer SambaAD.
This computer must be integrated into the domain.

For this example.
Name AD server: thot.dw.learn.lan
Ip AD server: 192.168.40.47/24
gateway: 192.168.40.254
Domain name: dw.learn.lan

vi /etc/hosts

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4  
192.168.40.47 thot.dw.learn.lan thot  

vi /etc/hostname

thot.dw.learn.lan  

vi /etc/sysconfig/network

# Created by anaconda  
networking=yes  
HOSTNAME=thot.dw.learn.lan  

Change Network.
Example:
IP: 192.168.40.47/24
Gateway: 192.168.40.254
Name Server: 1.1.1.1
Search domain: dw.learn.lan
nmcli con mod eth0 ipv4.method "manual" ipv4.addresses 192.168.40.47/24
nmcli con mod eth0 ipv4.gateway 192.168.40.254
nmcli con mod eth0 ipv4.dns 1.1.1.1
nmcli con mod eth0 ipv4.dns-search dw.learn.lan

Read the new network configuration.
more /etc/NetworkManager/system-connections/eth0.nmconnection

Apply the new network configuration.

ifconfig eth0 0.0.0.0
systemctl restart NetworkManager
ifconfig eth0

Restart the server.
reboot

Update.

RedHat may ask you to make a new subscription.
subscription-manager register --username <username> --password <password> --force

dnf update

Add rules for firewall.
vi /etc/ufw/applications.d/ufw-custom

[SRVADS]  
title=SRVADS  
description=Firewall access srvads  
ports=88,135,389,445,464,636,3268,3269,50000:51000/tcp|88,389,464/udp  
  
[MS-RPC]  
title=MS-RPC  
description=Microsoft protocol  
ports=49152:65535/tcp  

ufw reload

ufw allow IN SRVADS
ufw allow OUT SRVADS

Find your users network.
Example: 192.168.80.0/24.

ufw allow out from 192.168.40.47 to 192.168.80.0/24 app MS-RPC

Disable Avahi-Daemon (mDNS / Hello protocol).
systemctl stop avahi-daemon.service avahi-daemon.socket
systemctl disable avahi-daemon.service avahi-daemon.socket

Configure the system language to English to facilitate troubleshooting in the logs.
dnf install glibc-langpack-en
localectl set-locale LANG=en_US.utf8
localectl status

Check the useful packages to install.
dnf install epel-release wget sudo screen nmap telnet tcpdump rsync net-tools bind-utils htop

Restart the server.
reboot