[PASO1]

PC Windows

setting
manage optional feature
add feature
rsat (todo)

CentOS

root
cd ~
vim /etc/hosts
10.0.0.100 samba-ad samba-ad.so3.com

yum -y install epel-release

yum -y install dnf-plugins-core
yum config-manager --set-enabled powertools

yum -y install docbook-style-xsl gcc gdb gnutls-devel gpgme-devel jansson-devel \

keyutils-libs-devel krb5-workstation libacl-devel libaio-devel \
libarchive-devel libattr-devel libblkid-devel libtasn1 libtasn1-tools \
libxml2-devel libxslt lmdb-devel openldap-devel pam-devel perl \
perl-ExtUtils-MakeMaker perl-Parse-Yapp popt-devel python3-cryptography \
python3-dns python3-gpg python36-devel readline-devel rpcgen systemd-devel \
tar zlib-devel

wget https://download.samba.org/pub/samba/stable/samba-4.12.5.tar.gz

tar -xzvf samba-4.12.5.tar.gz

./configure --with-ads --with-systemd --with-winbind

make

make install

*terminal aparte*
cd ~

vim .bashrc
# User specific environment and startup program

PATH=$PATH:$HOME/bin:usr/local/samba/bin/:/usr/local/samba/sbin/

export PATH

*terminal samba*
samba-tool domain provision --use-rfc2307 --interactive

*terminal aparte*
firewall-cmd --add-port=53/tcp --permanent;firewall-cmd --add-port=53/udp --
permanent;firewall-cmd --add-port=88/tcp --permanent;firewall-cmd --add-port=88/udp
--permanent; \
firewall-cmd --add-port=135/tcp --permanent;firewall-cmd --add-port=137-138/udp --
permanent;firewall-cmd --add-port=139/tcp --permanent; \
firewall-cmd --add-port=389/tcp --permanent;firewall-cmd --add-port=389/udp --
permanent;firewall-cmd --add-port=445/tcp --permanent; \
firewall-cmd --add-port=464/tcp --permanent;firewall-cmd --add-port=464/udp --
permanent;firewall-cmd --add-port=636/tcp --permanent; \
firewall-cmd --add-port=1024-5000/tcp --permanent;firewall-cmd --add-port=3268-
3269/tcp --permanent

firewall-cmd --reload

vim /etc/systemd/system/samba.service

[Unit]
Description= Samba 4 Active Directory
After=syslog.target
After=network.target

[Service]
Type=forking
PIDFile=/usr/local/samba/var/run/samba.pid
ExecStart=/usr/local/samba/sbin/samba

[Install]
WantedBy=multi-user.target

*luego de crear el archivo de servicio*

chcon -R -t bin_t /usr/local/samba/sbin/

systemctl enable --now samba.service

systemctl status samba

*nueva terminal*
root
useradd asantos
smbpasswd -a asantos

*terminal samba*

testparm

*nueva terminal*

root

cd \

mkdir CarpetaUsuario CarpetaGlobal

chcon -t samba_share_t /CarpetaUsuario

chcon -t samba_share_t /CarpetaGlobal

fdisk /dev/sdb

n p 1 2048 +5G

vim /etc/fstab

/dev/sdb1 /CarpetaUsuario ext4 defaults,usrquota 0 0

/dev/sdb2 /CarpetaGrupo ext4 defaults,grpquota 0 0

reboot

*terminal 1*
root

vim /usr/local/samba/etc/smb.conf

[CarpetaUsuario]
path = /CarpetaUsuario
browseable = Yes
writeable = Yes
valid users = asantos
create mask = 0750

[Carpeta global]
path = /CarpetaNA
browseable = Yes
writeable = Yes

:wq

systemctl restart samba