{"id":140,"date":"2017-04-05T19:05:03","date_gmt":"2017-04-05T22:05:03","guid":{"rendered":"https:\/\/www.linuxpro.com.br\/2017\/04\/samba4-setup-opensuse\/"},"modified":"2026-09-08T01:40:30","modified_gmt":"2026-09-08T04:40:30","slug":"samba4-setup-opensuse","status":"publish","type":"post","link":"https:\/\/www.linuxpro.com.br\/en\/2017\/04\/samba4-setup-opensuse\/","title":{"rendered":"Samba4 4.7.0 Setup OpenSUSE 42.3"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" alt=\"Mascote do LinuxPro na sala de servidores, com os logos do openSUSE e do Samba na parede\" src=\"\/wp-content\/uploads\/2026\/09\/samba4-v3.webp\" width=\"1052\" height=\"652\" \/><\/p>\n<div style=\"background:#fff8e1;border-left:4px solid #8b1a1a;padding:.8em 1em;margin:1em 0\"><strong>Note (2026):<\/strong> The original howto used OpenSUSE Leap 42.3, Samba 4.7.0 compiled in <code data-no-translation=\"\">\/opt\/samba4<\/code> and the OBS repository <code data-no-translation=\"\">home:jniltinho<\/code>. Leap 42.3 is dead. Below: official packages <code data-no-translation=\"\">samba-ad-dc<\/code> on Leap 15.6, <code data-no-translation=\"\">samba-tool domain provision<\/code> and the unit <code data-no-translation=\"\">samba-ad-dc<\/code>.<\/div>\n<p>Samba 4 is still the free AD: LDAP, Kerberos, DNS and SYSVOL in the same process. In 2017 this post provisioned 4.7.0 on Leap 42.3. In 2026 the official wiki and Leap 15.6 speak the same language \u2014 <code data-no-translation=\"\">samba-tool<\/code> \u2014 but through the distro RPM, not the tarball in <code data-no-translation=\"\">\/opt<\/code>.<\/p>\n<p><!-- more --><\/p>\n<p><iframe style=\"width:100%;aspect-ratio:16\/9;border:0\" src=\"https:\/\/www.youtube-nocookie.com\/embed\/Ig3ZzqEonFs\" allowfullscreen loading=\"lazy\"><\/iframe><\/p>\n<p>The video is the 2017 lab. The provisioning commands remain; the package and systemd have changed.<\/p>\n<h2>What you need<\/h2>\n<ul>\n<li>openSUSE Leap, x86_64, VM or bare metal, static IP. <strong>Watch the version:<\/strong> Leap 15.6 ended support on 30 April 2026, so the current series is <strong>16.0<\/strong> (supported until October 2027). On 16.0 the <code data-no-translation=\"\">samba-ad-dc<\/code> may not be in the default OSS repository \u2014 in that case, the path is OBS <code data-no-translation=\"\">network:samba:ADDC<\/code>. Check with <code data-no-translation=\"\">zypper se samba-ad-dc<\/code> before starting.<\/li>\n<li>FQDN hostname, NTP, a single nameserver after provisioning: the DC itself.<\/li>\n<li>Do not mix <code data-no-translation=\"\">smbd<\/code>\/<code data-no-translation=\"\">nmbd<\/code> classic daemons with the AD DC. The DC binary is <code data-no-translation=\"\">samba<\/code>.<\/li>\n<\/ul>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">hostnamectl hostname dc1.linuxpro.net\necho '192.168.56.100 dc1.linuxpro.net dc1' &gt;&gt; \/etc\/hosts\ntimedatectl set-ntp true\n<\/code><\/pre>\n<h2>Packages (not the 2017 OBS)<\/h2>\n<p>The Samba wiki lists for SUSE\/openSUSE:<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">zypper refresh\nzypper in -y samba samba-winbind samba-ad-dc samba-tool krb5-client bind-utils chrony\nsystemctl disable --now smb nmb winbind 2&gt;\/dev\/null || true\nmv \/etc\/samba\/smb.conf \/etc\/samba\/smb.conf.bak 2&gt;\/dev\/null || true\n<\/code><\/pre>\n<p>The repository <code data-no-translation=\"\">home:jniltinho<\/code> + <code data-no-translation=\"\">samba4-4.7.0<\/code> + symlink in <code data-no-translation=\"\">\/usr\/local\/bin<\/code> is not needed. The <code data-no-translation=\"\">samba-tool<\/code> already comes in PATH.<\/p>\n<h2>Provision<\/h2>\n<p>The Administrator password must meet Samba policy (length, complexity). Do not paste passwords into the command line on a shared host \u2014 shell history stores them. Lab example:<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool domain provision --use-rfc2307 --interactive\n# realm: LINUXPRO.NET\n# domain: LINUXPRO\n# role: dc\n# DNS: SAMBA_INTERNAL\n# forwarder: o DNS da sua rede (ou 9.9.9.9)\n<\/code><\/pre>\n<p>Non-interactive (lab):<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool domain provision \n  --server-role=dc --use-rfc2307 \n  --dns-backend=SAMBA_INTERNAL \n  --realm=LINUXPRO.NET --domain=LINUXPRO \n  --adminpass='TroqueEstaSenha!23'\n<\/code><\/pre>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">cp \/var\/lib\/samba\/private\/krb5.conf \/etc\/krb5.conf\n# o DC resolve a si mesmo:\necho -e 'search linuxpro.netnnameserver 127.0.0.1' &gt; \/etc\/resolv.conf\nsystemctl enable --now samba-ad-dc chronyd\nsamba-tool domain info 127.0.0.1\nkinit administrator@LINUXPRO.NET\n<\/code><\/pre>\n<p>Firewall: 53, 88, 135, 139, 389, 445, 464, 636, 3268, 3269 and high RPC ports. Without this Windows will not join.<\/p>\n<h2>Users and Administrator password<\/h2>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool user create joao\nsamba-tool user setpassword Administrator\nsamba-tool user list\n<\/code><\/pre>\n<p>Linux client in the domain: the howto <a href=\"\/en\/2017\/04\/ubuntu-no-windows-active-directory\/\">Ubuntu in Active Directory<\/a> (sssd\/realmd). Windows 10\/11: DNS pointing to the DC + RSAT. Wiki: <a href=\"https:\/\/wiki.samba.org\/index.php\/Installing_RSAT\">Installing RSAT<\/a>.<\/p>\n<h2>What remained<\/h2>\n<p><code data-no-translation=\"\">zypper in samba-ad-dc<\/code>, provision, <code data-no-translation=\"\">samba-ad-dc.service<\/code>, <code data-no-translation=\"\">kinit<\/code>. Leap 42.3, Samba 4.7 in <code data-no-translation=\"\">\/opt<\/code> and the unit <code data-no-translation=\"\">samba4.service<\/code> from the homemade package, no. Docs: <a href=\"https:\/\/wiki.samba.org\/index.php\/Setting_up_Samba_as_an_Active_Directory_Domain_Controller\">Samba Wiki \u2014 AD DC<\/a> \u00b7 packages: <a href=\"https:\/\/wiki.samba.org\/index.php\/Distribution-specific_Package_Installation\">Distribution-specific Package Installation<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Samba 4 is still the free AD implementation: LDAP, Kerberos, DNS, and SYSVOL in the same process. In 2017, this post provisioned 4.7.0 on Leap 42.3. In 2026, the official wiki and Leap 15.6 speak the same language \u2014 samba-tool \u2014 \u2026 <a title=\"Samba4 4.7.0 Setup OpenSUSE 42.3\" class=\"read-more\" href=\"https:\/\/www.linuxpro.com.br\/en\/2017\/04\/samba4-setup-opensuse\/\" aria-label=\"Read more about Samba4 4.7.0 Setup OpenSUSE 42.3\">Read more<\/a><\/p>","protected":false},"author":0,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,83,84],"tags":[86,14,4,85,87],"class_list":["post-140","post","type-post","status-publish","format-standard","hentry","category-linux","category-opensuse","category-samba4","tag-ad","tag-howto","tag-linux","tag-opensuse","tag-samba4"],"_links":{"self":[{"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/posts\/140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/comments?post=140"}],"version-history":[{"count":6,"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/posts\/140\/revisions"}],"predecessor-version":[{"id":1053,"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/posts\/140\/revisions\/1053"}],"wp:attachment":[{"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/media?parent=140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/categories?post=140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/en\/wp-json\/wp\/v2\/tags?post=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}