From: Tobias Schliebitz on
Dear all,

I'm currently trying out Samba4.0.0-alpha10. Because I'm unfamiliar with
the Berkeley Internet Name Demon (bind), I've so far been using dnsmasq
on my home network. I just want to inform eveybody who cares that it's
possible to set up Samba4 and dnsmasq so as to allow domain logons from
a Windows 7 workstation.

Generally, I followed the how-to on the samba-wiki
(http://wiki.samba.org/index.php/Samba4/HOWTO). But I skipped Step 8
(Configure Server-side DNS) and put most of the entries in what is
called YOUR.ZONE.conf into my /etc/hosts, which is in turn read by
dnsmasq and propagated to the network clients. Here is what it looks like:

---

127.0.0.1 localhost
localhost
192.168.100.1 yoda.heimatnetz.priv yoda
[... description of my network clients ...]

192.168.100.1 gc._msdcs.heimatnetz.priv
gc._msdcs
192.168.100.1 _gc._tcp.heimatnetz.priv
_gc._tcp
192.168.100.1
_gc._tcp.Default-First-Site-Name._sites.heimatnetz.priv
_gc._tcp.Default-First-Site-Name._sites
192.168.100.1
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.heimatnetz.priv
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs
192.168.100.1 _gc._tcp.gc._msdcs.heimatnetz.priv
_gc._tcp.gc._msdcs
192.168.100.1 _ldap._tcp.gc._msdcs.heimatnetz.priv
_ldap._tcp.gc._msdcs
192.168.100.1 _ldap._tcp.heimatnetz.priv
_ldap._tcp
192.168.100.1 _ldap._tcp.dc._msdcs.heimatnetz.priv
_ldap._tcp.dc._msdcs

---

Of course, you must be very careful with any MS-specific entry containig
an underscore ( _ ).
Then the /etc/dnsmasq.conf file:

---

interface=eth0
domain-needed
bogus-priv
filterwin2k

dhcp-authoritative
domain=heimatnetz.priv

dhcp-range=192.168.100.200,192.168.100.250,12h

dhcp-option=1,255.255.255.0 # Subnet Mask
dhcp-option=3,192.168.100.3 # Router/Gateway
dhcp-option=6,192.168.100.1 # Domain Server (DNS)
dhcp-option=44,192.168.100.1 # Netbios Name Server (WINS)
dhcp-option=4,192.168.100.1 # Time Server

---

Naturally, the lines concerning DNS and WINS are especially important.
No special entries in the smb.conf file besides those created by
provisioning are necessary, but the entries there ought to match your
network configuration. Mine are:

---

[globals]
netbios name = YODA
server string = Samba 4 auf yoda.heimatnetz.priv

workgroup = HEIMATNETZ
realm = HEIMATNETZ.PRIV
server role = domain controller

unix charset = ISO8859-1
dos charset = UTF8
log level = 0

time server = yes

[netlogon]
path = /usr/local/samba/var/locks/sysvol/heimatnetz.priv/scripts
read only = no

[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = no

---

I hope this helps someone save some time, as it cost me many hours to
find this way.

Cheers,
Tobias
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba