{"id":140,"date":"2017-04-05T19:05:03","date_gmt":"2017-04-05T22:05:03","guid":{"rendered":"https:\/\/www.linuxpro.com.br\/2017\/04\/samba4-setup-opensuse\/"},"modified":"2026-09-08T01:40:30","modified_gmt":"2026-09-08T04:40:30","slug":"samba4-setup-opensuse","status":"publish","type":"post","link":"https:\/\/www.linuxpro.com.br\/es\/2017\/04\/samba4-setup-opensuse\/","title":{"rendered":"Samba4 4.7.0 Configuraci\u00f3n OpenSUSE 42.3"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" alt=\"Mascote do LinuxPro na sala de servidores, com os logos do openSUSE e do Samba na parede\" src=\"\/wp-content\/uploads\/2026\/09\/samba4-v3.webp\" width=\"1052\" height=\"652\" \/><\/p>\n<div style=\"background:#fff8e1;border-left:4px solid #8b1a1a;padding:.8em 1em;margin:1em 0\"><strong>Nota (2026):<\/strong> El howto original usaba OpenSUSE Leap 42.3, Samba 4.7.0 compilado en <code data-no-translation=\"\">\/opt\/samba4<\/code> y el repositorio OBS <code data-no-translation=\"\">home:jniltinho<\/code>. Leap 42.3 ha muerto. A continuaci\u00f3n: paquetes oficiales <code data-no-translation=\"\">samba-ad-dc<\/code> en Leap 15.6, <code data-no-translation=\"\">samba-tool domain provision<\/code> y el unit <code data-no-translation=\"\">samba-ad-dc<\/code>.<\/div>\n<p>Samba 4 sigue siendo el AD libre: LDAP, Kerberos, DNS y SYSVOL en el mismo proceso. En 2017 esta entrada aprovisionaba 4.7.0 en Leap 42.3. En 2026 la wiki oficial y Leap 15.6 hablan la misma lengua \u2014 <code data-no-translation=\"\">samba-tool<\/code> \u2014 solo que mediante el RPM de la distro, no mediante el tarball en <code data-no-translation=\"\">\/opt<\/code>.<\/p>\n<p><!-- more --><\/p>\n<p><iframe style=\"width:100%;aspect-ratio:16\/9;border:0\" src=\"https:\/\/www.youtube-nocookie.com\/embed\/Ig3ZzqEonFs\" allowfullscreen loading=\"lazy\"><\/iframe><\/p>\n<p>El v\u00eddeo es el laboratorio de 2017. Los comandos del provision siguen; el paquete y systemd han cambiado.<\/p>\n<h2>Qu\u00e9 necesitas<\/h2>\n<ul>\n<li>openSUSE Leap, x86_64, VM o bare metal, IP fijo. <strong>Atenci\u00f3n a la versi\u00f3n:<\/strong> o Leap 15.6 finaliz\u00f3 su soporte el 30 de abril de 2026, por lo que la serie actual es la <strong>16.0<\/strong> (soporte hasta octubre de 2027). En 16.0 el <code data-no-translation=\"\">samba-ad-dc<\/code> puede no estar en el repositorio OSS est\u00e1ndar; en ese caso, la v\u00eda es el OBS <code data-no-translation=\"\">network:samba:ADDC<\/code>. Compru\u00e9belo con <code data-no-translation=\"\">zypper se samba-ad-dc<\/code> antes de comenzar.<\/li>\n<li>Hostname FQDN, NTP, un \u00fanico nameserver despu\u00e9s del aprovisionamiento: el propio DC.<\/li>\n<li>No mezcle <code data-no-translation=\"\">smbd<\/code>\/<code data-no-translation=\"\">nmbd<\/code> cl\u00e1sicos con el AD DC. El binario del DC es el <code data-no-translation=\"\">samba<\/code>.<\/li>\n<\/ul>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">hostnamectl hostname dc1.linuxpro.net\necho '192.168.56.100 dc1.linuxpro.net dc1' &gt;&gt; \/etc\/hosts\ntimedatectl set-ntp true\n<\/code><\/pre>\n<h2>Paquetes (no el OBS de 2017)<\/h2>\n<p>La wiki de Samba indica para SUSE\/openSUSE:<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">zypper refresh\nzypper in -y samba samba-winbind samba-ad-dc samba-tool krb5-client bind-utils chrony\nsystemctl disable --now smb nmb winbind 2&gt;\/dev\/null || true\nmv \/etc\/samba\/smb.conf \/etc\/samba\/smb.conf.bak 2&gt;\/dev\/null || true\n<\/code><\/pre>\n<p>El repositorio <code data-no-translation=\"\">home:jniltinho<\/code> + <code data-no-translation=\"\">samba4-4.7.0<\/code> + symlink en <code data-no-translation=\"\">\/usr\/local\/bin<\/code> no. El <code data-no-translation=\"\">samba-tool<\/code> ya viene en el PATH.<\/p>\n<h2>Provision<\/h2>\n<p>La contrase\u00f1a del Administrator debe cumplir la pol\u00edtica de Samba (longitud, complejidad). No pegues la contrase\u00f1a en la l\u00ednea de comandos en un host compartido \u2014 el historial del shell la guarda. Ejemplo de laboratorio:<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool domain provision --use-rfc2307 --interactive\n# realm: LINUXPRO.NET\n# domain: LINUXPRO\n# role: dc\n# DNS: SAMBA_INTERNAL\n# forwarder: o DNS da sua rede (ou 9.9.9.9)\n<\/code><\/pre>\n<p>No interactivo (lab):<\/p>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool domain provision \n  --server-role=dc --use-rfc2307 \n  --dns-backend=SAMBA_INTERNAL \n  --realm=LINUXPRO.NET --domain=LINUXPRO \n  --adminpass='TroqueEstaSenha!23'\n<\/code><\/pre>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">cp \/var\/lib\/samba\/private\/krb5.conf \/etc\/krb5.conf\n# o DC resolve a si mesmo:\necho -e 'search linuxpro.netnnameserver 127.0.0.1' &gt; \/etc\/resolv.conf\nsystemctl enable --now samba-ad-dc chronyd\nsamba-tool domain info 127.0.0.1\nkinit administrator@LINUXPRO.NET\n<\/code><\/pre>\n<p>Cortafuegos: 53, 88, 135, 139, 389, 445, 464, 636, 3268, 3269 y RPC alto. Sin esto, Windows no se une.<\/p>\n<h2>Usuarios y contrase\u00f1a del Administrator<\/h2>\n<pre data-no-translation=\"\"><code class=\"language-bash\" data-no-translation=\"\">samba-tool user create joao\nsamba-tool user setpassword Administrator\nsamba-tool user list\n<\/code><\/pre>\n<p>Cliente Linux en el dominio: el howto <a href=\"\/es\/2017\/04\/ubuntu-no-windows-active-directory\/\">Ubuntu en Active Directory<\/a> (sssd\/realmd). Windows 10\/11: DNS apuntando al DC + RSAT. Wiki: <a href=\"https:\/\/wiki.samba.org\/index.php\/Installing_RSAT\">Installing RSAT<\/a>.<\/p>\n<h2>Cierre<\/h2>\n<p><code data-no-translation=\"\">zypper in samba-ad-dc<\/code>, provision, <code data-no-translation=\"\">samba-ad-dc.service<\/code>, <code data-no-translation=\"\">kinit<\/code>. Leap 42.3, Samba 4.7 en <code data-no-translation=\"\">\/opt<\/code> y el unit <code data-no-translation=\"\">samba4.service<\/code> del paquete casero, no. Docs: <a href=\"https:\/\/wiki.samba.org\/index.php\/Setting_up_Samba_as_an_Active_Directory_Domain_Controller\">Wiki de Samba \u2014 AD DC<\/a> \u00b7 paquetes: <a href=\"https:\/\/wiki.samba.org\/index.php\/Distribution-specific_Package_Installation\">Instalaci\u00f3n de paquetes espec\u00edficos de la distribuci\u00f3n<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Samba 4 ainda \u00e9 o AD livre: LDAP, Kerberos, DNS e SYSVOL no mesmo processo. Em 2017 este post provisionava 4.7.0 no Leap 42.3. Em 2026 o wiki oficial e o Leap 15.6 falam a mesma l\u00edngua \u2014 samba-tool \u2014 &#8230; <a title=\"Samba4 4.7.0 Configuraci\u00f3n OpenSUSE 42.3\" class=\"read-more\" href=\"https:\/\/www.linuxpro.com.br\/es\/2017\/04\/samba4-setup-opensuse\/\" aria-label=\"Leer m\u00e1s sobre Samba4 4.7.0 Setup OpenSUSE 42.3\">Leer m\u00e1s<\/a><\/p>","protected":false},"author":0,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,83,84],"tags":[86,14,4,85,87],"class_list":["post-140","post","type-post","status-publish","format-standard","hentry","category-linux","category-opensuse","category-samba4","tag-ad","tag-howto","tag-linux","tag-opensuse","tag-samba4"],"_links":{"self":[{"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/posts\/140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/comments?post=140"}],"version-history":[{"count":6,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/posts\/140\/revisions"}],"predecessor-version":[{"id":1053,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/posts\/140\/revisions\/1053"}],"wp:attachment":[{"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/media?parent=140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/categories?post=140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.linuxpro.com.br\/es\/wp-json\/wp\/v2\/tags?post=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}