{"id":140,"date":"2017-04-05T19:05:03","date_gmt":"2017-04-05T22:05:03","guid":{"rendered":"https:\/\/www.linuxpro.com.br\/2017\/04\/samba4-setup-opensuse\/"},"modified":"2026-09-08T01:40:30","modified_gmt":"2026-09-08T04:40:30","slug":"samba4-setup-opensuse","status":"publish","type":"post","link":"https:\/\/www.linuxpro.com.br\/es\/2017\/04\/samba4-setup-opensuse\/","title":{"rendered":"Samba4 4.7.0 Setup OpenSUSE 42.3"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" alt=\"Mascote do LinuxPro na sala de servidores, com os logos do openSUSE e do Samba na parede\" src=\"\/wp-content\/uploads\/2026\/09\/samba4-v3.webp\" width=\"1052\" height=\"652\" \/><\/p>\n<div style=\"background:#fff8e1;border-left:4px solid #8b1a1a;padding:.8em 1em;margin:1em 0\"><strong>Nota (2026):<\/strong> O howto original usava OpenSUSE Leap 42.3, Samba 4.7.0 compilado em <code data-no-translation=\"\">\/opt\/samba4<\/code> e o reposit\u00f3rio OBS <code data-no-translation=\"\">home:jniltinho<\/code>. Leap 42.3 morreu. Abaixo: pacotes oficiais <code data-no-translation=\"\">samba-ad-dc<\/code> no Leap 15.6, <code data-no-translation=\"\">samba-tool domain provision<\/code> e o unit <code data-no-translation=\"\">samba-ad-dc<\/code>.<\/div>\n<p>Samba 4 ainda \u00e9 o AD livre: LDAP, Kerberos, DNS e SYSVOL no mesmo processo. Em 2017 este post provisionava 4.7.0 no Leap 42.3. Em 2026 o wiki oficial e o Leap 15.6 falam a mesma l\u00edngua \u2014 <code data-no-translation=\"\">samba-tool<\/code> \u2014 s\u00f3 que pelo RPM da distro, n\u00e3o pelo tarball em <code data-no-translation=\"\">\/opt<\/code>.<\/p>\n<p><!-- more --><\/p>\n<p><iframe style=\"width:100%;aspect-ratio:16\/9;border:0\" src=\"https:\/\/www.youtube-nocookie.com\/embed\/Ig3ZzqEonFs\" allowfullscreen loading=\"lazy\"><\/iframe><\/p>\n<p>O v\u00eddeo \u00e9 o laborat\u00f3rio de 2017. Os comandos do provision continuam; o pacote e o systemd mudaram.<\/p>\n<h2>O que voc\u00ea precisa<\/h2>\n<ul>\n<li>openSUSE Leap, x86_64, VM ou bare metal, IP fixo. <strong>Aten\u00e7\u00e3o \u00e0 vers\u00e3o:<\/strong> o Leap 15.6 encerrou o suporte em 30 de abril de 2026, ent\u00e3o a s\u00e9rie atual \u00e9 a <strong>16.0<\/strong> (suporte at\u00e9 outubro de 2027). No 16.0 o <code data-no-translation=\"\">samba-ad-dc<\/code> pode n\u00e3o estar no reposit\u00f3rio OSS padr\u00e3o \u2014 nesse caso, o caminho \u00e9 o OBS <code data-no-translation=\"\">network:samba:ADDC<\/code>. Confira com <code data-no-translation=\"\">zypper se samba-ad-dc<\/code> antes de come\u00e7ar.<\/li>\n<li>Hostname FQDN, NTP, um \u00fanico nameserver depois do provision: o pr\u00f3prio DC.<\/li>\n<li>N\u00e3o misture <code data-no-translation=\"\">smbd<\/code>\/<code data-no-translation=\"\">nmbd<\/code> cl\u00e1ssicos com o AD DC. O bin\u00e1rio do DC \u00e9 o <code data-no-translation=\"\">samba<\/code>.<\/li>\n<\/ul>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">hostnamectl hostname dc1.linuxpro.net\necho '192.168.56.100 dc1.linuxpro.net dc1' &gt;&gt; \/etc\/hosts\ntimedatectl set-ntp true\n<\/code><\/pre>\n<h2>Pacotes (n\u00e3o o OBS de 2017)<\/h2>\n<p>O wiki da Samba lista para SUSE\/openSUSE:<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">zypper refresh\nzypper in -y samba samba-winbind samba-ad-dc samba-tool krb5-client bind-utils chrony\nsystemctl disable --now smb nmb winbind 2&gt;\/dev\/null || true\nmv \/etc\/samba\/smb.conf \/etc\/samba\/smb.conf.bak 2&gt;\/dev\/null || true\n<\/code><\/pre>\n<p>O reposit\u00f3rio <code data-no-translation=\"\">home:jniltinho<\/code> + <code data-no-translation=\"\">samba4-4.7.0<\/code> + symlink em <code data-no-translation=\"\">\/usr\/local\/bin<\/code> n\u00e3o. O <code data-no-translation=\"\">samba-tool<\/code> j\u00e1 vem no PATH.<\/p>\n<h2>Provision<\/h2>\n<p>Senha do Administrator precisa passar na pol\u00edtica do Samba (tamanho, complexidade). N\u00e3o cole senha na linha de comando em host compartilhado \u2014 o hist\u00f3rico do shell guarda. Exemplo de laborat\u00f3rio:<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool domain provision --use-rfc2307 --interactive\n# realm: LINUXPRO.NET\n# domain: LINUXPRO\n# role: dc\n# DNS: SAMBA_INTERNAL\n# forwarder: o DNS da sua rede (ou 9.9.9.9)\n<\/code><\/pre>\n<p>N\u00e3o-interativo (lab):<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool domain provision \n  --server-role=dc --use-rfc2307 \n  --dns-backend=SAMBA_INTERNAL \n  --realm=LINUXPRO.NET --domain=LINUXPRO \n  --adminpass='TroqueEstaSenha!23'\n<\/code><\/pre>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">cp \/var\/lib\/samba\/private\/krb5.conf \/etc\/krb5.conf\n# o DC resolve a si mesmo:\necho -e 'search linuxpro.netnnameserver 127.0.0.1' &gt; \/etc\/resolv.conf\nsystemctl enable --now samba-ad-dc chronyd\nsamba-tool domain info 127.0.0.1\nkinit administrator@LINUXPRO.NET\n<\/code><\/pre>\n<p>Firewall: 53, 88, 135, 139, 389, 445, 464, 636, 3268, 3269 e RPC alto. Sem isso o Windows n\u00e3o junta.<\/p>\n<h2>Usu\u00e1rios e senha do Administrator<\/h2>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool user create joao\nsamba-tool user setpassword Administrator\nsamba-tool user list\n<\/code><\/pre>\n<p>Cliente Linux no dom\u00ednio: o howto <a href=\"\/es\/2017\/04\/ubuntu-no-windows-active-directory\/\">Ubuntu no Active Directory<\/a> (sssd\/realmd). Windows 10\/11: DNS apontando para o DC + RSAT. Wiki: <a href=\"https:\/\/wiki.samba.org\/index.php\/Installing_RSAT\">Installing RSAT<\/a>.<\/p>\n<h2>O que ficou<\/h2>\n<p><code data-no-translation=\"\">zypper in samba-ad-dc<\/code>, provision, <code data-no-translation=\"\">samba-ad-dc.service<\/code>, <code data-no-translation=\"\">kinit<\/code>. Leap 42.3, Samba 4.7 em <code data-no-translation=\"\">\/opt<\/code> e o unit <code data-no-translation=\"\">samba4.service<\/code> do pacote caseiro, n\u00e3o. Docs: <a href=\"https:\/\/wiki.samba.org\/index.php\/Setting_up_Samba_as_an_Active_Directory_Domain_Controller\">Samba Wiki \u2014 AD DC<\/a> \u00b7 pacotes: <a href=\"https:\/\/wiki.samba.org\/index.php\/Distribution-specific_Package_Installation\">Distribution-specific Package Installation<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Samba 4 ainda \u00e9 o AD livre: LDAP, Kerberos, DNS e SYSVOL no mesmo processo. Em 2017 este post provisionava 4.7.0 no Leap 42.3. Em 2026 o wiki oficial e o Leap 15.6 falam a mesma l\u00edngua \u2014 samba-tool \u2014 &#8230; <a title=\"Samba4 4.7.0 Setup OpenSUSE 42.3\" class=\"read-more\" href=\"https:\/\/www.linuxpro.com.br\/es\/2017\/04\/samba4-setup-opensuse\/\" aria-label=\"Read more about Samba4 4.7.0 Setup OpenSUSE 42.3\">Read more<\/a><\/p>","protected":false},"author":0,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,83,84],"tags":[86,14,4,85,87],"class_list":["post-140","post","type-post","status-publish","format-standard","hentry","category-linux","category-opensuse","category-samba4","tag-ad","tag-howto","tag-linux","tag-opensuse","tag-samba4"],"_links":{"self":[{"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/posts\/140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/comments?post=140"}],"version-history":[{"count":6,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/posts\/140\/revisions"}],"predecessor-version":[{"id":1053,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/posts\/140\/revisions\/1053"}],"wp:attachment":[{"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/media?parent=140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/categories?post=140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/tags?post=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}