Samba PDC VM(squeeze)

We publish VMware VM image on which Samba PDC (with LDAP) is configured on Debian GNU/Linux 6.0.

We hope this VM will help to evaluate.

If you find any bugs or desire, please mail to monyo-at-samba.gr.jp

There are older versions(sorry for Japanese only):

• Debian GNU/Linux 5.0 version Sambaドメイン評価環境(lenny) - ldapsam:editposix
• Debian GNU/Linux 4.0 version Sambaドメイン評価環境(etch) - smbldap-tools
• Debian GNU/Linux 3.1 version Sambaドメイン評価環境(sarge) - smbldap-tools

Japanese text are available.

Download

You may download the VM image at:

• ftp://ftp.ring.gr.jp/pub/net/samba-jp/vmware_player_images/sambapdc-squeeze-20110713.zip
• ftp://ftp.samba.gr.jp/pub/samba-jp/vmware_player_images/sambapdc-squeeze-20110713.zip

Function

• Acts as PDC of "SAMBADOM" domain

Uses Samba 3.5.6 included in Debian squeeze. Windows 7 can join to the domain.

• Various settings are ready to examine various Samba functions easily. "How to examine and demonstrate" is under construction.
  • Can manage from Windows

The management tools are available at Windows NT Server Tools for Windows NT Workstation 4.0 Available .

• • Syncronized password between UNIX user and Samba user.
• The detail settings and how to build is available at How to build Samba PDC (squeeze)

Settings

Networking

item	value
hostname	sambapdc
DNS domainname	sambadom.local
LDAP DN	dc=sambadom,dc=local
TCP/IP	via DHCP
VMware virtual network	NAT interface

Other settings

item	value
language	English (C locale)
region	Japan
keyboard	English 101 keyboard
source of packages	ftp.jp.debian.org
root's password	samba

Packages installed

Packages are installed via "apt-get", thus packages depending on the installed packages below are also installed and you can also manage packages to use normal package management tools on Debian.

package	description
ftp	ftp client to receive files
acl	getfacl/setfacl commands manupulating ACL
attr	attr command manupulating Extended Attributes
libcrack2	library which forces complex passwords
libnss-ldap	NSS module to store UNIX user informations on LDAP
libpam-ldap	PAM modules to authenticate UNIX user using informations on LDAP
slapd	LDAP server
ldap-utils	various commands manupulating LDAP
samba/winbind	Samba server
libpam-smbpass	PAM module to change Samba user's password when the corresponding UNIX user's password is changed
smbclient	Samba client
swat	Samba Web Administration Tool

ssh is not installed to reduce disk space. Please install if you need.

Files modified

filename	description
/etc/fstab
/etc/hosts.allow	to control SWAT access
/etc/logrotate.d/samba-syslog(added)	log rotate settings for audit log
/etc/nsswitch.conf	NSS settings
/etc/pam.d/common-password	PAM settings
/etc/pam.d/common-session	PAM settings
/etc/rsyslog.d/samba.conf(added)	audit log setting
/etc/samba/smb.conf
/etc/samba/smbusers(added)	username mapping file
/usr/local/sbin/crackcheck(added)	to force complex password
/usr/local/sbin/createhomedir(added)	to create homedir automatically
/usr/local/sbin/mgrshare(added)	to manage shares from Windows
/usr/local/sbin/remove-old-files-in-recycle-bin	to remove old files from recycle bin
/usr/local/sbin/var-check	a sample script to evaluate Samba variables
under /var/lib/samba/shares	sample shares

Accounts

• Administrator (password is samba / has administrative rights)
• ldap01(password is ldap01)
• ldap02(password is ldap02)
• ldap03(password is ldap03)

Updates

version 20110713

• squeeze version