How To Manage SAMBA 4 AD DC with samba tool

CREATE USER

samba-tool user create foo.bar

ADD FIRSTNAME AND LASTNAME STRUCTURE

Create file foo.bar.fl.ldif

dn: CN=foo.bar,CN=Users,DC=roomit,DC=com
changetype: modify
replace: givenName
givenName: foo
replace: sn
sn: bar

Apply ldif to user

ldbmodify -H  /etc/samba/private/sam.ldb   foo.bar.fl.ldif

ADD EMAIL STRUCTURE

Create file foo.bar.mail.ldif

dn: CN=foo.bar,CN=Users,DC=roomit,DC=com
changetype: modify
replace: mail
mail: foo.bar@roomit.com

Apply ldif to user

ldbmodify -H  /etc/samba/private/sam.ldb   foo.bar.mail.ldif

CREATE GROUP

Create group as department

samba-tool group add System-Architect-Design-And-Analyst 
samba-tool group add Finance-And-Accounting 
samba-tool group add Telco
samba-tool group add Operation 
samba-tool group add HRD 
samba-tool group add Development 
samba-tool group add QA-QC 
samba-tool group add Project-Management 
samba-tool group add Sales-And-Marketing 
samba-tool group add DevOps 
samba-tool group add Top-Management 
samba-tool group add GA

Create group as filesharing

samba-tool group add share-hrd
samba-tool group add share-adm
samba-tool group add share-fin
samba-tool group add share-dev
samba-tool group add share-mkt
samba-tool group add share-tel
samba-tool group add share-ga
samba-tool group add share-mgt

Create group as additional Application mediawiki wikiops.roomit.com need seperate for read and write.

samba-tool group add Mediawiki-Operation
samba-tool group add Junior-Operation
samba-tool group add Senior-Operation

Finance need audit file sharing marketing

samba-tool group add Finance-And-Marketing

ASSIGN GROUP TO GROUP

example, share-dev have included department Development, QA/QC and Project Management.

samba-tool group addmembers share-dev Development
samba-tool group addmembers share-dev QA-QC 
samba-tool group addmembers share-dev Project-Management

Lisitng group share-dev

samba-tool group listmembers share-dev

#[root@ad ~]# samba-tool group listmembers share-dev
#QA-QC
#Development

ASSIGN USER TO GROUP

example, user foo.bar have opeartion department

samba-tool group addmembers Operation foo.bar

Listing

samba-tool group listmembers Operaion

REMOVE USER

samba-tool user delete foo.bar

REMOVE GROUP From GROUP

samba-tool group deletemembers share-dev Operation

REMOVE User From Group

samba-tool group deletemembers Operation foo.bar

REMOVE GROUP

samba-tool group delete Operation

RESET User Password

samba-tool user setpassword foo.bar

REMOVE NS

samba-tool dns delete localhost roomit.auth @ NS adprimary.roomit.com.roomit.auth -U dwiyan.wijatmiko

LIST DNS

samba-tool dns query localhost roomit.auth @ ALL -U dwiyan.wijatmiko

Remove A Record

samba-tool dns delete localhost roomit.auth @ A 10.0.2.15 -U dwiyan.wijatmiko

Add A record

samba-tool dns add localhost roomit.auth adsecondary A 192.168.33.14 -U dwiyan.wijatmiko