 |
|---|
|
|---|
Overview
The following is a description of the automated installation I have written for FreeBSD 7.1 (AMD64 or i386).
The script automates the process of setting up a Samba v3 server with an OpenLDAP v2.4 backend as a Primary Domain Controller with as little interaction as possible. During the scripted installation you will be prompted for your root password once and asked to hit ok twice.
SourceForge.net Project Page: { http://sourceforge.net/projects/autosambaldap/ }
UPDATE: THE INSTALLER NOW INCLUDES THE OPTION OF INSTALLING DOVECOT AND POSTFIX! BOTH OF THESE WILL AUTHENTICATE TO THE SAME LDAP BACKEND AS SAMBA. ALSO INCLUDED IN THE LATEST RELEASE IS ROUNDCUBE (WEBMAIL).
Installation Method
The entire process for the CD-ROM version from start (bare metal) to finish (working server (including the seperate installation of FreeBSD 7.1)) should take about 12 minutes.
LATEST VERSION AVAILABLE ON PROJECT PAGE
Quick Start
mount /cdrom && cd /cdrom && sh setup.shWatch a WMV capture of a FreeBSD 7.1/i386 + Rev5 installation using VMWare { HERE }
Once installed you can add users via the command-line (see: /root/adduser_example.txt) or with Microsoft User Manager for Domains (USRMGR.exe) from the Windows 2003 Resource Kit. { http://download.microsoft.com/download/a/8/b/a8bc2027-f25c-438e-b763-bbef1dbdbf4b/usrmgr.msi }
Prerequisites
A fresh installation of FreeBSD 7.1 (Minimal Installation) with a configured network and a working internet connection.
A "/home" directory that will be used for the storage of user data.
Disk Layout
This script assumes that you will have a mount-point /home/ that will be used as the location of your user data storage.
The system software will fit on a partition of < 1GiB. On my own system I am using a 1GiB Solid State Disk for this and the operating system uses 652MB on a fully configured system. For my /home/ I am using a pair of 160GiB SATA disks in a ZFS mirror. I will have to look into some logging issues at some point in the near future with this configuration because as we all know log files can and will eat up a lot of space.
For my testing I have a bootable USB thumb drive with an installation of FreeBSD that I "dd" to my SSD each time rather than reinstalling for each test.
#!/bin/sh /bin/dd if=/dev/da0 of=/dev/ad0 bs=1M /sbin/fsck /dev/ad0s1a /sbin/mount /dev/ad0s1a /mnt /usr/bin/sed -e 's/da0s1a/ad0s1a/g' /mnt/etc/fstab >> /mnt/etc/fstab.new /bin/mv /mnt/etc/fstab.new /mnt/etc/fstab /sbin/halt |
|---|
I setup my /home/ with the following script that is not part of the installation script that is being discussed in this document.
This is why the script has some ZFS specific settings included in it (these are currently commented out).
#!/bin/sh /bin/rm -rf /home |
|---|
Network Setup
You must configure your new server with a three part name. { i.e. hostname.domain.root }
This is required because of the way that I wrote the automated install script and how it handles the configuration files.
You should also assign a static IPv4 address to your new server.
Instructions on how to properly configure your network are beyond the scope of this document.
Installed Software
The following is a list of packages that will be installed with this setup script: ( pkg_info |awk '{print $1}' )
|
|---|
Other Stuff....
The "Web Based Administration Tools" are a work in progress, these will take some time to get finished. As things currently stand with version 0.93 you can add/delete users and groups, change group membership, change passwords, export LDIFs (per user and global) and monitor disk space usage on a per user level.
A few things to note:
You can not remove a user from the "Domain Users" group. Once added to this group you can not remove the user from it.
-- I may modify some of the smbldap-tools code to allow it in the future.....
You cannot remove the "Default" groups - these should really stay there for compatibly with Windows clients.
The "root" and "nobody" users are "hidden" from the web-gui user listing (although it is possible to get to them).
You can not at this time edit the information (other than password) of an existing user.
Last Updated: April 08, 2009-
Copyright 2009 - Adam G. Sweeney - All Rights Reserved
