Distribution EOLE » Qualification, Test et Intégration continue » eole-ci-tests

h1. Samba4 Primaire

h2. config eol
<pre><code class="JSON">
{
"libelle_etab": {"owner": "gen_config", "val": "ACA"},
"adresse_ip_eth0": {"owner": "gen_config", "val": "172.20.56.45"},
"system_mail_to": {"owner": "gen_config", "val": "eolebase"},
"check_passwd": {"owner": "gen_config", "val": "non"},
"nom_domaine_local": {"owner": "gen_config", "val": "ac-test.lan"},
"proxy_client_adresse": {"owner": "gen_config", "val": "172.20.210.10"},
"exim_relay_smtp": {"owner": "gen_config", "val": "smtp.ac-dijon.fr"},
"netmask_ssh_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"ip_admin_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"numero_etab": {"owner": "gen_config", "val": "0000000A"},
"nom_machine": {"owner": "gen_config", "val": "eolebase"},
"netmask_admin_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"domaine_messagerie_etab": {"owner": "gen_config", "val": "ac-test.fr"},
"ip_ssh_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"nom_academie": {"owner": "gen_config", "val": "ac-test"},
"adresse_ip_gw": {"owner": "gen_config", "val": "172.20.56.254"},
"activer_proxy_client": {"owner": "gen_config", "val": "oui"},
"adresse_ip_dns": {"owner": "gen_config", "val": ["172.20.210.10"]}
}
</code></pre>

h2. instalation

# ajout de %%nom_domaine_local dans @hostname@ => faire un %if si module de type AD
# le fichier @hosts@ est OK
# modification de la fstab, cf. comme on fait dans @eole-fichier@ mais devra aussi être appliqué aux fichiers de Samba4 (sysvol, ...)
<pre>
[libdefaults]
dns_lookup_realm = true
dns_lookup_kdc = true
default_realm = AC-TEST.LAN
</pre>
# modification du @krb5.conf@ => templatiser
# provisionnement du domaine
# modification smb.conf => templatiser ou utilisser samba-tool ?
<pre>
# Global parameters
[global]
workgroup = AC-TEST
realm = ac-test.lan
netbios name = EOLEBASE
server role = active directory domain controller
dns forwarder = 172.20.210.10

[netlogon]
path = /usr/local/samba/var/locks/sysvol/ac-test.lan/scripts
read only = No

[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No
</pre>
# fichier resolv.conf => ???
# fichier ntp.conf + modifications

h2. EOLEisation

Création d'un dictionnaire Creole gérant le service "samba4" et les ouvertures de port tcp et udp.

h2. Migration

Paquets supplémentaires à mettre en dépendance :
<pre>
libldap2-dev python-ldap
</pre>



<pre>
#
# INSTALLATION SECONDAIRE !!!!!
</pre>

h1. Samba4 Secondaire

h2. config eof
<pre><code class="JSON">
{
"libelle_etab": {"owner": "gen_config", "val": "ACA"},
"adresse_ip_eth0": {"owner": "gen_config", "val": "172.20.56.46"},
"system_mail_to": {"owner": "gen_config", "val": "eolebase"},
"check_passwd": {"owner": "gen_config", "val": "non"},
"nom_domaine_local": {"owner": "gen_config", "val": "ac-test.lan"},
"proxy_client_adresse": {"owner": "gen_config", "val": "172.20.210.10"},
"exim_relay_smtp": {"owner": "gen_config", "val": "smtp.ac-dijon.fr"},
"netmask_ssh_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"ip_admin_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"numero_etab": {"owner": "gen_config", "val": "0000000A"},
"nom_machine": {"owner": "gen_config", "val": "eolebase2"},
"netmask_admin_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"domaine_messagerie_etab": {"owner": "gen_config", "val": "ac-test.fr"},
"ip_ssh_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"nom_academie": {"owner": "gen_config", "val": "ac-test"},
"adresse_ip_gw": {"owner": "gen_config", "val": "172.20.56.254"},
"activer_proxy_client": {"owner": "gen_config", "val": "oui"},
"adresse_ip_dns": {"owner": "gen_config", "val": ["172.20.210.10"]}
}
</code></pre>
h2. instalation

<pre>
#
# INSTALLATION SECONDAIRE !!!!!
# le primaire est 'eolebase' en 172.20.56.45
#

apt-get update

export DEBIAN_FRONTEND=noninteractive

apt-get -q -y install build-essential autotools-dev comerr-dev dpkg-dev ethtool krb5-multidev libacl1-dev libattr1-dev libblkid-dev \
libblkid1 libc-dev-bin libc6-dev libdevmapper1.02.1 libgcrypt11-dev libgnutls-dev libgpg-error-dev libkrb5-dev libncurses5-dev \
libpopt-dev libreadline-gplv2-dev libssl-dev libstdc++6-4.4-dev libtasn1-3-dev libudev0 linux-libc-dev manpages-dev python-dev \
udev uuid-dev zlib1g-dev krb5-user

unset DEBIAN_FRONTEND

cd /root
tar -zxvf samba-4.1.13.tar.gz
cd samba-4.1.13
./configure --with-ldap
make
make install

cp samba4.sh /etc/init.d/samba4
chmod 755 /etc/init.d/samba4
update-rc.d samba4 default

#implicite
#apt-get install ntpdate
#ntpdate pool.ntp.org
#apt-get install ntp

# socket NTP Samba
cd /usr/share/eole/creole/modif/
cp ../distrib/ntp.conf .
cat >>ntp.conf <<EOF
ntpsigndsocket /usr/local/samba/var/lib/ntp_signd
EOF
sed -i 's/restrict default kod notrap nomodify nopeer noquery/restrict default kod notrap nomodify nopeer noquery mssntp/g' ntp.conf

# Hostname FQDN
cat >hostname <<EOF
%%nom_machine.%%nom_domaine_local
EOF

gen_patch

chgrp ntp /usr/local/samba/var/lib/ntp_signd
usermod -a -G staff ntp

reconfigure

echo "export PATH=$PATH:/usr/local/samba/sbin:/usr/local/samba/bin" >> /root/.bashrc
source /root/.bashrc

#bascule sur primaire
cat >/etc/resolv.conf <<EOF
nameserver 172.20.56.45
search ac-test.lan
EOF

cat >/etc/krb5.conf <<EOF
[libdefaults]
dns_lookup_realm = true
dns_lookup_kdc = true
default_realm = AC-TEST.LAN
EOF

kinit administrator

#debug /usr/local/samba/sbin/samba -i -d9
/usr/local/samba/sbin/samba

samba-tool domain join ac-test.lan DC -U administrator --realm=ac-test.lan -W AC-TEST.LAN

samba-tool dns add 127.0.0.1 ac-test.lan ac-test.lan NS eolebase2.ac-test.lan

#bascule sur moi
cat >/etc/resolv.conf <<EOF
nameserver 127.0.0.1
search ac-test.lan
EOF

</pre>

h1. samba4 fichier

<pre>
apt-get -q -y install build-essential autotools-dev comerr-dev dpkg-dev ethtool krb5-multidev libacl1-dev libattr1-dev libblkid-dev \
libblkid1 libc-dev-bin libc6-dev libdevmapper1.02.1 libgcrypt11-dev libgnutls-dev libgpg-error-dev libkrb5-dev libncurses5-dev \
libpopt-dev libreadline-gplv2-dev libssl-dev libstdc++6-4.4-dev libtasn1-3-dev libudev0 linux-libc-dev manpages-dev python-dev \
udev uuid-dev zlib1g-dev krb5-user acl libldap-dev libcups2-dev

./configure --with-ads --with-shared-modules=idmap_ad
</pre>

h1. Horus Web avec authentification dans AD

h2. config eol
<pre><code class="JSON">
{
"check_passwd": {"owner": "gen_config", "val": "non"},
"nom_domaine_local": {"owner": "gen_config", "val": "ac-test.lan"},
"proxy_client_adresse": {"owner": "gen_config", "val": "172.20.210.10"},
"bacula_dir_password": {"owner": "gen_config", "val": "efcf727bbaab47cede2a162a26601dbc0173e0c38e751040e37dacff"},
"web_url": {"owner": "gen_config", "val": "172.20.56.49"},
"activer_apache": {"owner": "gen_config", "val": "oui"},
"domaine_messagerie_etab": {"owner": "gen_config", "val": "ac-test.fr"},
"exim_relay_smtp": {"owner": "gen_config", "val": "smtp.ac-dijon.fr"},
"bacula_fd_password": {"owner": "gen_config", "val": "68e1170b2be9afddedd239dd543de50636d4045a399a43bae499f234"},
"system_mail_to": {"owner": "gen_config", "val": "eolebase"},
"ip_admin_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"numero_etab": {"owner": "gen_config", "val": "0000000A"},
"netmask_admin_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"bacula_sd_password": {"owner": "gen_config", "val": "70ba154dd6c3967016ff8c533fe42724ca0c5ec612edebacb5a12e53"},
"bacula_dir_name": {"owner": "gen_config", "val": "web-dir"},
"activer_proxy_client": {"owner": "gen_config", "val": "oui"},
"ip_ssh_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"libelle_etab": {"owner": "gen_config", "val": "ACA"},
"smb_workgroup": {"owner": "gen_config", "val": "domgg"},
"smb_netbios_name": {"owner": "gen_config", "val": "horus"},
"netmask_ssh_eth0": {"owner": "gen_config", "val": ["0.0.0.0"]},
"adresse_ip_eth0": {"owner": "gen_config", "val": "172.20.56.49"},
"nom_machine": {"owner": "gen_config", "val": "web"},
"nom_academie": {"owner": "gen_config", "val": "ac-test"},
"adresse_ip_gw": {"owner": "gen_config", "val": "172.20.56.254"},
"adresse_ip_dns": {"owner": "gen_config", "val": ["172.20.210.10"]}
"activer_phpmyadmin": {"owner": "gen_config", "val": "oui"}
}
</code></pre>

h2. instalation