{"id":2437659,"date":"2025-02-27T02:13:23","date_gmt":"2025-02-27T02:13:23","guid":{"rendered":"https:\/\/www.wacoca.com\/news\/2437659\/"},"modified":"2025-02-27T02:13:23","modified_gmt":"2025-02-27T02:13:23","slug":"%e7%ac%ac852%e5%9b%9e%e3%80%80samba%e3%81%a7%e4%bd%9c%e3%82%8bactive-directory%e4%ba%92%e6%8f%9b%e7%92%b0%e5%a2%83-%ef%bc%881%ef%bc%89%e3%81%9d%e3%81%ae%e7%89%b9%e6%80%a7%e3%81%a81%e5%8f%b0%e7%9b%ae","status":"publish","type":"post","link":"https:\/\/www.wacoca.com\/news\/2437659\/","title":{"rendered":"\u7b2c852\u56de\u3000Samba\u3067\u4f5c\u308bActive Directory\u4e92\u63db\u74b0\u5883 \uff081\uff09\u305d\u306e\u7279\u6027\u30681\u53f0\u76ee\u306e\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u306e\u69cb\u7bc9 | gihyo.jp"},"content":{"rendered":"

Samba\u306fWindows OS\u306e\u6301\u3064\u5404\u7a2e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u6a5f\u80fd\u3092\u5b9f\u88c5\u3057\u305f\u30d5\u30ea\u30fc\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3067\u3059\u3002\u4e2d\u3067\u3082\u3001\u5229\u7528\u3067\u304d\u308b\u30d5\u30a1\u30a4\u30eb\u5171\u6709\u30b5\u30fc\u30d0\u30fc\uff08\u7b2c85\u56de\uff09\u3084\u30d7\u30ea\u30f3\u30c8\u30b5\u30fc\u30d0\u30fc\uff08\u7b2c218\u56de\uff09\u306e\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308b\u3053\u3068\u306f\u6709\u540d\u3067\u3059\u3002<\/p>\n

<\/p>\n

\u5b9f\u306f\u3053\u306eSamba\u306fActive Directory\uff08\u4ee5\u4e0b\u3001AD\uff09\u306e\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\uff08\u4ee5\u4e0b\u3001DC\uff09\u4e92\u63db\u306e\u6a5f\u80fd\u3082\u63d0\u4f9b\u3057\u3066\u3044\u307e\u3059\u3002Samba\u3092\u4f7f\u3063\u305fAD\u4e92\u63db\u74b0\u5883\u306e\u69cb\u7bc9\u65b9\u6cd5\u3092\u8907\u6570\u56de\u306b\u5206\u3051\u3066\u89e3\u8aac\u3057\u307e\u3059\u3002<\/p>\n


\nSamba AD\u306e\u30e1\u30ea\u30c3\u30c8\u30fb\u30c7\u30e1\u30ea\u30c3\u30c8 <\/p>\n

Samba AD\u306e\u30e1\u30ea\u30c3\u30c8\u30fb\u30c7\u30e1\u30ea\u30c3\u30c8\u3092\u6574\u7406\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u305d\u3082\u305d\u3082Samba AD\u3068\u3044\u3046\u3088\u308aAD\u81ea\u4f53\u306e\u30e1\u30ea\u30c3\u30c8\u3067\u3059\u304c\u3001\u7b2c836\u56de\u3067\u3082\u89e6\u308c\u305f\u901a\u308a\u30e6\u30fc\u30b6\u30fc\u3084\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u3092\u4e00\u5143\u7684\u306b\u7ba1\u7406\u3084\u8a8d\u8a3c\u30fb\u8a8d\u53ef\u3067\u304d\u308b\u3053\u3068\u3067\u3059\u3002<\/p>\n

<\/p>\n

AD\u3092\u4f7f\u3063\u305f\u8a8d\u8a3c\u30fb\u8a8d\u53ef\u306e\u4f8b\u3068\u3057\u3066\u306f\u3001AD\u30c9\u30e1\u30a4\u30f3\u306e\u30e6\u30fc\u30b6\u30fc\uff08AD\u30e6\u30fc\u30b6\u30fc\uff09\u304c\u6319\u3052\u3089\u308c\u307e\u3059\u3002\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3057\u3066\u3044\u308b\u30de\u30b7\u30f3\u3067\u3042\u308a\u3001\u304b\u3064\u3001\u9069\u5207\u306a\u6a29\u9650\u304c\u3042\u308c\u3070\u3001AD\u30e6\u30fc\u30b6\u30fc\u306f\u7279\u306b\u4e8b\u524d\u8a2d\u5b9a\u4e0d\u8981\u3067\u305d\u306e\u30de\u30b7\u30f3\uff08PC\uff09\u306b\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u307e\u305f\u3001AD\u306b\u3088\u308b\u30ea\u30bd\u30fc\u30b9\u7ba1\u7406\u306e\u4f8b\u306b\u3064\u3044\u3066\u306f\u7b2c836\u56de\u3067\u3082\u7d39\u4ecb\u3057\u307e\u3057\u305f\u304c\u3001\u30b0\u30eb\u30fc\u30d7\u30dd\u30ea\u30b7\u30fc\uff08GPO\uff09\u3092\u5229\u7528\u3059\u308b\u3053\u3068\u3067\u30c9\u30e1\u30a4\u30f3\u306e\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u3092\u4e00\u62ec\u3067\u8a2d\u5b9a\u30fb\u7ba1\u7406\uff08\u7d71\u5236\uff09\u3067\u304d\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u3069\u3061\u3089\u3082\u4f1a\u793e\u7d44\u7e54\u306b\u304a\u3044\u3066\u7d71\u5236\u306b\u95a2\u308f\u308b\u91cd\u8981\u306a\u90e8\u5206\u3067\u3042\u308a\u3001\u304b\u3068\u3044\u3063\u3066\u30011\u30e6\u30fc\u30b6\u30fc\u30fb1\u30de\u30b7\u30f3\u3054\u3068\u306b\u6e29\u304b\u307f\u306e\u3042\u308b\u4f5c\u696d\u3067\u5bfe\u5fdc\u3057\u3066\u56de\u308b\u306e\u306f\uff08\u7d44\u7e54\u304c\u5927\u304d\u304f\u306a\u308c\u3070\u306a\u308b\u307b\u3069\uff09\u9aa8\u306e\u6298\u308c\u308b\u4f5c\u696d\u3067\u3059\u3002\u3053\u306e\u4f5c\u696d\u30b3\u30b9\u30c8\u306e\u524a\u6e1b\u3092\u898b\u8fbc\u3081\u308b\u3053\u3068\u304cAD\u306e\u6700\u5927\u306e\u30e1\u30ea\u30c3\u30c8\u3068\u3044\u3048\u308b\u3067\u3057\u3087\u3046\u3002<\/p>\n

<\/p>\n

\u7d9a\u3044\u3066\u3001Samba AD\u3092\u4f7f\u3046\u3053\u3068\u306e\u30e1\u30ea\u30c3\u30c8\u3067\u3059\u304c\u3001\u3053\u306e\u3088\u3046\u306aAD\uff08\u4e92\u63db\uff09\u74b0\u5883\u3092Windows Server\u306eAD\u6a5f\u80fd\uff08Active Directory Domain Services\u3002\u4ee5\u4e0b\u3001Samba AD\u3068\u533a\u5225\u3059\u308b\u305f\u3081\u3001Windows Server\u306eAD\u6a5f\u80fd\u306e\u3053\u3068\u3092ADDS\u3068\u547c\u3073\u307e\u3059\uff09\u3092Windows Server\u306a\u3057\u3067\u69cb\u7bc9\u3067\u304d\u308b\u3053\u3068\u3067\u3057\u3087\u3046\u3002<\/p>\n

<\/p>\n

Windows Server\u306e\u30e9\u30a4\u30bb\u30f3\u30b9\u306f\u4fa1\u683c\u7684\u306b\u500b\u4eba\u3067\u8cfc\u5165\u3059\u308b\u306b\u306f\u3061\u3087\u3063\u3068\u30cf\u30fc\u30c9\u30eb\u304c\u9ad8\u3044\u3068\u8003\u3048\u3089\u308c\u307e\u3059\u3002\u3054\u5bb6\u5ead\u3067AD\u74b0\u5883\u3092\u904b\u7528\u3057\u3066\u307f\u305f\u3044\u3068\u3044\u3063\u305f\u5834\u5408\u306b\u306fSamba AD\u306e\u51fa\u756a\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u3002\u6700\u8fd1\u3060\u3068\u3001AD\u306b\u53c2\u52a0\u3067\u304d\u308bNAS\u3068\u3044\u3063\u305f\u3082\u306e\u3082\u3042\u308b\u3088\u3046\u306a\u306e\u3067\u3001\u8a66\u3057\u3066\u307f\u305f\u3044\u3068\u3044\u3046\u65b9\u3082\u3044\u308b\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u30e9\u30a4\u30bb\u30f3\u30b9\u4ee5\u5916\u3067\u3082\u3001\u4f8b\u3048\u3070Raspberry Pi\u306e\u3088\u3046\u306aARM\u30dc\u30fc\u30c9\uff08\u30de\u30b7\u30f3\uff09\u3067\u3082Samba AD DC\u3092\u52d5\u4f5c\u3055\u305b\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059[1]\u3002\u3053\u308c\u306f\u5909\u5316\u7403\u306e\u4e00\u7a2e\u3060\u3068\u601d\u3044\u307e\u3059\u304c\u3001ADDS\u74b0\u5883\u306bLinux\u4e0a\u3067\u52d5\u4f5c\u3059\u308bSamba AD DC\u3092\u6df7\u305c\u3066\u304a\u3051\u3070\u3001\u7406\u8ad6\u4e0a\u306fWindows\u306b\u56fa\u6709\u306e\u554f\u984c[2]\u306b\u906d\u9047\u3057\u305f\u5834\u5408\u3067\u3082DC\u304c\u5168\u6ec5\u3059\u308b\u3068\u3044\u3063\u305f\u4e8b\u614b\u3092\u56de\u907f\u3067\u304d\u308b\u3068\u3044\u3046\u53ef\u80fd\u6027\u3082\u8003\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

[1] \u672c\u7a3f\u57f7\u7b46\u6642\u70b9\u3067\u6700\u65b0\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3042\u308bWindows Server 2025\u3067\u306fARM\u30de\u30b7\u30f3\u3067\u3082\u52d5\u4f5c\u3059\u308b\u3068\u3044\u3046\u60c5\u5831\u304c\u3042\u308a\u307e\u3057\u305f\u304c\u3001\u7b46\u8005\u306e\u77e5\u308b\u9650\u308a\u3067\u306f\u3001\u516c\u5f0f\u306b\u306f\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u3066\u3044\u306a\u304f\u3001ISO\u30a4\u30e1\u30fc\u30b8\u3082\u307e\u3060\u516c\u958b\u3055\u308c\u3066\u3044\u306a\u3044\u3088\u3046\u3067\u3059\u3002<\/p>\n


\n
\n <\/p>\n

[2] \u4f8b\u3048\u3070\u3053\u306e\u4e8b\u4ef6\u306f\u8a18\u61b6\u306b\u65b0\u3057\u3044\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

\u307e\u305f\u3001AD\uff08\u7279\u306bLinux\u30de\u30b7\u30f3\u304b\u3089\u898b\u305fAD\uff09\u306e\u7406\u89e3\u3092\u6df1\u3081\u308b\u3068\u3044\u3046\u610f\u5473\u3067\u306fSamba AD\u306f\u300c\u826f\u304d\u5e2b\u5320\u300d\u3068\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u7b2c836\u56de\u3067\u3082\u89e6\u308c\u305f\u901a\u308a\u3001ADDS\u306fLDAP\u3084Kerberos\u3001DNS\u306a\u3069\u306e\u30aa\u30fc\u30d7\u30f3\u7cfb\u306e\u6280\u8853\u8981\u7d20\u306e\u7d71\u5408\u30fb\u5b9f\u88c5\u3067\u3059\u3002ADDS\u74b0\u5883\u3067\u3042\u308c\u3070Windows\u3089\u3057\u3044\u300cGUI\u3067\u5024\u3092\u5165\u529b\u3057\u3066\u3044\u3063\u305f\u3089\u3044\u3044\u611f\u3058\u306b\u8a2d\u5b9a\u30fb\u69cb\u6210\u3057\u3066\u304f\u308c\u308b\u300d\u3068\u3044\u3063\u305f\u90e8\u5206\u3082\u3001\u30b3\u30de\u30f3\u30c9\u30e9\u30a4\u30f3\u30d9\u30fc\u30b9\u3067\u4f5c\u696d\u3059\u308bSamba AD\u3067\u306f\u300c\u5b9f\u969b\u306b\u306f\u4f55\u3092\u3084\u3063\u3066\u3044\u308b\u306e\u304b\u300d\u3092\u610f\u8b58\u3057\u306a\u304c\u3089\u9032\u3081\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u7b46\u8005\u306e\u611f\u60f3\u306b\u306a\u308a\u307e\u3059\u304c\u3001ADDS\u4e92\u63db\u3092\u76ee\u6307\u3059\u3068\u3044\u3046\u90fd\u5408\u4e0a\u3001Samba AD\u3068\u3044\u3046\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u81ea\u4f53\u3082\u300cAD\u306f\u3069\u3046\u3044\u3046\u6280\u8853\u306e\u96c6\u307e\u308a\u3067\u6210\u7acb\u3057\u3066\u3044\u308b\u306e\u304b\u300d\u3068\u3044\u3046\u70b9\u3067Wiki\u304c\u5145\u5b9f\u3057\u3066\u3044\u308b\u3088\u3046\u306b\u611f\u3058\u3089\u308c\u307e\u3059\u3002\u3082\u3061\u308d\u3093\u3001Samba\u306f\u30bd\u30fc\u30b9\u30b3\u30fc\u30c9\u304c\u516c\u958b\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u6c17\u306b\u306a\u308c\u3070\u8aad\u3080\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u4e00\u65b9\u3067\u3001\u4e16\u306e\u5e38\u3067\u3059\u304c\u3001\u30e1\u30ea\u30c3\u30c8\u306f\u30c7\u30e1\u30ea\u30c3\u30c8\uff08\u306a\u3044\u3057\u306f\u6ce8\u610f\u70b9\u30fb\u8003\u616e\u3059\u3079\u304d\u70b9\uff09\u306b\u3082\u306a\u308a\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u307e\u305a\u3001Samba AD\u306f\u3042\u304f\u307e\u3067\u4e92\u63db\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3067\u3042\u308a\u3001ADDS\u305d\u308c\u81ea\u4f53\u3067\u306f\u306a\u3044\u3068\u3044\u3046\u70b9\u304c\u6319\u3052\u3089\u308c\u307e\u3059\u3002\u4f8b\u3048\u3070\u3001Samba\u3067\u306f\u4f7f\u7528\u3067\u304d\u308b\u6a5f\u80fd\u30ec\u30d9\u30eb\u306e\u9078\u629e\u306e\u5e45\u306b\u5236\u9650\u304c\u3042\u308b\u3001\u3042\u308b\u3044\u306f\u3001\u9078\u629e\u3067\u304d\u305f\u3068\u3057\u3066\u3082\u52d5\u4f5c\u3057\u306a\u3044\u6a5f\u80fd\u304c\u3042\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u300c\u6a5f\u80fd\u30ec\u30d9\u30eb\u300d\u306fAD\u30c9\u30e1\u30a4\u30f3\u3067\u5229\u7528\u3067\u304d\u308b\u6a5f\u80fd\u306e\u7bc4\u56f2\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u308b\u3082\u306e\u3067\u3001Windows Server\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3068\u5bfe\u5fdc\u4ed8\u3051\u3089\u308c\u3066\u3044\u307e\u3059\u3002\u5f53\u7136\u3001\u6a5f\u80fd\u30ec\u30d9\u30eb\u304c\u9ad8\u3044\u307b\u3069\u3088\u308a\u65b0\u3057\u3044\u6a5f\u80fd\u304c\u4f7f\u3048\u307e\u3059\u3002\u3053\u306e\u6a5f\u80fd\u30ec\u30d9\u30eb\u3068\u3044\u3046\u4ed5\u7d44\u307f\u306b\u3088\u308a\u3001\u30c9\u30e1\u30a4\u30f3\u306b\u8907\u6570\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306eWindows Server\u306eDC\u3092\u6df7\u5728\u3055\u305b\u3089\u308c\u307e\u3059\u3002\u4f8b\u3048\u3070\u6a5f\u80fd\u30ec\u30d9\u30eb\u306bWindows Server 2016\u3092\u9078\u629e\u3057\u3066\u3044\u308b\u30c9\u30e1\u30a4\u30f3\u3067\u306f\u3001\u3053\u306e\u6a5f\u80fd\u30ec\u30d9\u30eb\u3092\u30b5\u30dd\u30fc\u30c8\u3059\u308bWindows Server 2016\u4ee5\u964d\uff08\u672c\u7a3f\u57f7\u7b46\u6642\u70b9\u3067Windows Server 2016, 2019, 2022, 2025\uff09\u306e\u30de\u30b7\u30f3\u304cDC\u3068\u3057\u3066\u53c2\u52a0\u3067\u304d\u307e\u3059\u3002<\/p>\n

<\/p>\n

Samba AD\u306e\u6a5f\u80fd\u30ec\u30d9\u30eb\u306f\u3001\u516c\u5f0f\u60c5\u5831\u3092\u78ba\u8a8d\u3059\u308b\u3068\u3001Windows Server 2008 R2, 2012, 2012 R2, 2016\u306e\u5404\u6a5f\u80fd\u30ec\u30d9\u30eb\u304c”Supported Functional Levels”\u3068\u3055\u308c\u3066\u3044\u307e\u3059[3]\u3002\u305f\u3060\u3057\u3001\u305d\u306e\u6a5f\u80fd\u30ec\u30d9\u30eb\u3092\u9078\u629e\u3067\u304d\u308b\u304b\u3089\u3068\u3044\u3063\u3066\u3001\u305d\u306e\u6a5f\u80fd\u306e\u3059\u3079\u3066\u304c\u5b9f\u88c5\u3055\u308c\u3066\u3044\u308b\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u6a5f\u80fd\u30ec\u30d9\u30eb\u3054\u3068\u306b\u6b20\u3051\u3066\u3044\u308b\u6a5f\u80fd\u3084\u4e0d\u5b8c\u5168\u306a\u6a5f\u80fd\u304c\u3042\u308a\u307e\u3059\u3002\u306a\u304a\u3001\u7b46\u8005\u304c\u898b\u305f\u9650\u308a\u3067\u3059\uff08\u500b\u4eba\u306e\u6240\u611f\u3068\u3082\u3044\u3044\u307e\u3059\uff09\u304c\u3001\u53e4\u3044\u6a5f\u80fd\u30ec\u30d9\u30eb\u307b\u3069\u3001\u3044\u308f\u3086\u308b\u300c\u67af\u308c\u3066\u3044\u308b\u300d\u72b6\u614b\u3068\u306f\u3044\u3048\u305d\u3046\u3067\u3059\u3002<\/p>\n

<\/p>\n

\u307e\u305f\u3001\u6a5f\u80fd\u30ec\u30d9\u30eb\u306b\u95a2\u4fc2\u306a\u304fSamba AD\u5168\u4f53\u3067\u5b9f\u9a13\u7684\u3060\u3063\u305f\u308a\u3001\u5236\u9650\u306e\u3042\u3063\u305f\u308a\u3059\u308b\u6a5f\u80fd\u3084\u63d0\u4f9b\u3055\u308c\u3066\u3044\u306a\u3044\u6a5f\u80fd[4]\u304c\u3042\u308a\u307e\u3059\u3002Windows Server 2019, 2022, 2025\u306e\u6a5f\u80fd\u30ec\u30d9\u30eb\u306f\u73fe\u6642\u70b9\u3067\u9078\u629e\u80a2\u3068\u3057\u3066\u7528\u610f\u3055\u308c\u3066\u3044\u306a\u3044\u3088\u3046\u3067\u3059[5]\u3002<\/p>\n


\n <\/p>\n

[3] \u516c\u5f0fWiki\u306b\u306fWindows Server 2008\u306b\u3064\u3044\u3066\u3082\u8a18\u8f09\u304c\u3042\u308a\u307e\u3059\u304c\u3001Ubuntu\u306eman page smb.conf(5)\u306a\u3069\u3092\u8aad\u3080\u3068\u3001\u9078\u629e\u3067\u304d\u308b\u6a5f\u80fd\u30ec\u30d9\u30eb\u306fWindows Server 2008 R2\u4ee5\u4e0a\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n


\n
\n <\/p>\n

[4] \u73fe\u5728\u306eSamba AD\u3067\u6700\u3082\u4f4e\u3044\u6a5f\u80fd\u30ec\u30d9\u30eb\u306fWindows Server 2008 R2\u306a\u306e\u3067\u3001\u6a5f\u80fd\u30ec\u30d9\u30eb\u3054\u3068\u306b\u6b20\u3051\u3066\u3044\u308b\u6a5f\u80fd\u306e\u3046\u3061Windows Server 2008 R2\u6a5f\u80fd\u30ec\u30d9\u30eb\u3067\u6b20\u3051\u3066\u3044\u308b\u6a5f\u80fd\u306f\u3001Samba AD\u5168\u4f53\u3067\u6b20\u3051\u3066\u3044\u308b\u6a5f\u80fd\u3067\u3059\u3002<\/p>\n


\n
\n <\/p>\n

[5] Windows Server 2012 R2\u4ee5\u524d\u306f\u3059\u3067\u306bMicrosoft\u793e\u306e\u63d0\u4f9b\u3059\u308b\u5ef6\u9577\u30b5\u30dd\u30fc\u30c8\u304c\u7d42\u4e86\u3057\u3066\u3044\u307e\u3059\u3002\u6a5f\u80fd\u30ec\u30d9\u30eb\u3068OS\u3068\u3057\u3066\u306eWindows Server\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306f\u72ec\u7acb\u3057\u305f\u8003\u3048\u65b9\u3067\u3059\u304c\u3001\u904e\u53bb\u306b\u306f\u6a5f\u80fd\u30ec\u30d9\u30eb\u304c\u5ec3\u6b62\u3055\u308c\u3066\u304a\u308a\u3001\u307e\u305f\u3001Windows Server 2003\u6a5f\u80fd\u30ec\u30d9\u30eb\u306f\u5ec3\u6b62\u9014\u4e0a\u306b\u3042\u308a\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

\u52a0\u3048\u3066\u3001Samba AD\u306e\u69cb\u7bc9\u30fb\u904b\u7528\u306b\u306fAD\u306b\u52a0\u3048\u3001Samba AD\u72ec\u81ea\u306e\u77e5\u8b58\u3084\u30ce\u30a6\u30cf\u30a6\u304c\u5fc5\u8981\u3067\u3059\u3002\u3064\u307e\u308a\u3001\u4f55\u304b\u554f\u984c\u304c\u8d77\u304d\u305f\u5834\u5408\u3001\u6700\u7d42\u7684\u306b\u306f\u81ea\u5206\u3067\u8a2d\u5b9a\u3084\u30ed\u30b0\u3092\u898b\u76f4\u3057\u3066\u8abf\u67fb\u30fb\u5bfe\u5fdc\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3068\u3044\u3046\u3053\u3068\u3067\u3082\u3042\u308a\u307e\u3059\u3002\u7b46\u8005\u3068\u3057\u3066\u306f\u3053\u308c\u306f\u300c\u304a\u3082\u3057\u308d\u3044\u90e8\u5206\u30fb\u697d\u3057\u3044\u90e8\u5206\u300d\u3068\u3057\u3066\u3080\u3057\u308d\u300c\u30e1\u30ea\u30c3\u30c8\u300d\u306e1\u3064\u306b\u6319\u3052\u305f\u3044\u3068\u3053\u308d\u3067\u3059\u304c\u3001\u3053\u3068\u3092\u59cb\u3081\u308b\u524d\u306b\u8a8d\u8b58\u3057\u3066\u304a\u304f\u3079\u304d\u70b9\u3067\u3059\u3002<\/p>\n

<\/p>\n

\u3053\u306e\u3088\u3046\u306b\u4e92\u63db\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3067\u3042\u308bSamba AD\u306f\u672c\u5bb6\u306eADDS\u3068\u6bd4\u3079\u308b\u3068\u5f53\u7136\u306a\u304c\u3089\u4e0d\u8db3\u3084\u5236\u7d04\u3001\u8003\u616e\u3059\u3079\u304d\u70b9\u304c\u305d\u308c\u306a\u308a\u306b\u3042\u308a\u307e\u3059\u3002\u305d\u306e\u305f\u3081\u3001\u5404\u7a2e\u6a5f\u80fd\u3092\u99c6\u4f7f\u3057\u305f\u5927\u898f\u6a21\u306aAD\u3092\u69cb\u7bc9\u30fb\uff08\u2060\u672c\u756a\uff09\u904b\u7528\u3057\u305f\u3044\u306e\u3067\u3042\u308c\u3070\u7d20\u76f4\u306bWindows Server\u3092\u4f7f\u3046\u3079\u304d\u3067\u3042\u308b\u3068\u3044\u3046\u306e\u304c\u516c\u6b63\u306a\u8a55\u4fa1\u3067\u3057\u3087\u3046\u3002<\/p>\n

<\/p>\n

\u2026\u2026\u3068\u3001\u3069\u3046\u3057\u3066\u3082\u300c\u4f46\u3057\u66f8\u304d\u300d\u7684\u306a\u8aac\u660e\u304c\u591a\u304f\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3057\u305f\u304c\u3001\u7d50\u5c40\u306e\u3068\u3053\u308d\u306f\u3001Samba AD\u306e\u6027\u8cea\uff08\u5236\u7d04\uff09\u3092\u7406\u89e3\u3057\u305f\u3046\u3048\u3067\u81ea\u5df1\u5224\u65ad\u30fb\u5229\u7528\u3042\u308b\u3044\u306f\u30a8\u30f3\u30b8\u30e7\u30a4\u3059\u308c\u3070\u3044\u3044\u3060\u3051\u3067\u306f\u3042\u308a\u307e\u3059\u3002\u3082\u3063\u3068\u3082\u3053\u308c\u306fSamba\u306b\u9650\u3089\u305a\u3001\u3059\u3079\u3066\u306eFLOSS\u306b\u3064\u3044\u3066\u3044\u3048\u308b\u3053\u3068\u3067\u3057\u3087\u3046\u3002\u5b9f\u969b\u3001\u672c\u7a3f\u3067\u7d39\u4ecb\u3059\u308b\u3088\u3046\u306a\u30b7\u30f3\u30d7\u30eb\u306a\u69cb\u6210\u304b\u3064\u5c0f\u898f\u6a21\u306a\u5229\u7528\u3067\u3042\u308c\u3070\u3001\u305d\u308c\u306a\u308a\u306b\u4f7f\u3048\u308b\u306e\u3067\u306f\u306a\u3044\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n


\n1\u53f0\u76ee\u306eSamba AD DC\u306e\u69cb\u7bc9 <\/p>\n

\u4eca\u56de\u306f\u6b21\u306e\u3088\u3046\u306a\u69cb\u6210\u3067Samba AD DC\u3092\u69cb\u7bc9\u3057\u307e\u3059\u3002<\/p>\n


\n
\n\u30c9\u30e1\u30a4\u30f3\u540d\uff1aexample.com
\n
\n1\u53f0\u76ee\u306eDC\uff08\u4eca\u56de\u69cb\u7bc9\u3059\u308b\u3082\u306e\u2060\uff09\u2060
\n
\n\u30db\u30b9\u30c8\u540d\uff1asamba-ad-dc01
\nIP\u30a2\u30c9\u30ec\u30b9\uff1a192.168.1.150
\n
\n
\n2\u53f0\u76ee\u306eDC\uff08\u6b21\u56de\u69cb\u7bc9\u3059\u308b\u3082\u306e\u2060\uff09\u2060
\n
\n\u30db\u30b9\u30c8\u540d\uff1asamba-ad-dc02
\nIP\u30a2\u30c9\u30ec\u30b9\uff1a192.168.1.151
\n
\n
\n
\n
\nOS\uff1aUbuntu Server 24.04 LTS
\n <\/p>\n

DC\u306f\u30c9\u30e1\u30a4\u30f3\u306e\u30e6\u30fc\u30b6\u30fc\u3084\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u306e\u8a8d\u8a3c\u30fb\u8a8d\u53ef\u30fb\u7ba1\u7406\u3092\u4e00\u624b\u306b\u5f15\u304d\u53d7\u3051\u308b\u305f\u3081\u3001\u8907\u6570\u53f0\u914d\u7f6e\u3057\u3066\u5197\u9577\u69cb\u6210\u3092\u3068\u308b\u3053\u3068\u304c\u4e00\u822c\u7684\u3067\u3059\u3002\u305d\u306e\u305f\u3081\u3001\u4eca\u56de\u306e\u30b7\u30ca\u30ea\u30aa\u3082DC\u30922\u53f0\u69cb\u6210\u306b\u3057\u307e\u3059\u3002\u307e\u305f\u3001OS\u3068\u30db\u30b9\u30c8\u540d\u306f\u3059\u3067\u306b\u8a2d\u5b9a\u6e08\u307f\u306e\u72b6\u614b\u304b\u3089\u4f5c\u696d\u3092\u958b\u59cb\u3057\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u305d\u308c\u3067\u306f\u30011\u53f0\u76ee\u306eSamba AD DC\u3092\u69cb\u7bc9\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u5fc5\u8981\u306a\u30d1\u30c3\u30b1\u30fc\u30b8\u7fa4\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002<\/p>\n


\nsamba-ad-dc01$ sudo apt install -y samba-ad-dc krb5-user bind9-dnsutils
\n <\/p>\n

\u9014\u4e2d\u3001krb5-user\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306e\u969b\u306b\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u306e\u30ec\u30eb\u30e0\u540d\u3092\u805e\u304b\u308c\u307e\u3059\u304c\u3001\u7a7a\u767d\u306e\u307e\u307eEnter\u3067\u629c\u3051\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

<\/p>\n

\u30d1\u30c3\u30b1\u30fc\u30b8\u7fa4\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u304c\u5b8c\u4e86\u3057\u305f\u3089\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u8d77\u52d5\u3059\u308bSamba\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u505c\u6b62\u30fb\u7121\u52b9\u5316\uff08\u30de\u30b9\u30af\uff09\u3057\u307e\u3059[6]\u3002<\/p>\n


\nsamba-ad-dc01$ sudo systemctl disable –now smbd nmbd winbind
\nsamba-ad-dc01$ sudo systemctl mask smbd nmbd winbind
\n
\n <\/p>\n

[6] \u3061\u306a\u307f\u306bsmbd\u306fSMB\/CIFS\u306e\u30d5\u30a1\u30a4\u30eb\u5171\u6709\u30b5\u30fc\u30d3\u30b9\u3001nmbd\u306fNetBIOS\u306b\u3088\u308b\u540d\u524d\u89e3\u6c7a\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u5fdc\u7b54\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u3001winbind\u306f\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u3068\u901a\u4fe1\u3057\u3066AD\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5229\u7528\u3059\u308b\u305f\u3081\u306e\u30b5\u30fc\u30d3\u30b9\u3067\u3059\u3002<\/p>\n


\n <\/p>\n

\u3053\u308c\u3089\u306eSamba\u95a2\u9023\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u505c\u6b62\u30fb\u7121\u52b9\u5316\u3057\u305f\u3089\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u914d\u7f6e\u3055\u308c\u308bsmb.conf\u3092\u524a\u9664\uff08\u3082\u3057\u304f\u306f\u79fb\u52d5\uff09\u3057\u307e\u3059\u3002<\/p>\n


\nsamba-ad-dc01$ sudo rm \/etc\/samba\/smb.conf
\n <\/p>\n

smb.conf\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3057\u305f\u3089\u3001samba-tool\u30b3\u30de\u30f3\u30c9\u3067\u30c9\u30e1\u30a4\u30f3\u3092\u5c55\u958b\u3057\u307e\u3059[7]\u3002<\/p>\n


\nsamba-ad-dc01$ sudo samba-tool domain provision –use-rfc2307 –interactive
\nRealm: example.com
\nDomain [example]:
\nServer Role (dc, member, standalone) [dc]:
\nDNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]:
\nDNS forwarder IP address (write ‘none’ to disable forwarding) [127.0.0.53]: 192.168.1.1
\nAdministrator password:
\nRetype password:
\n
\n <\/p>\n

[7] samba-tool\u3067\u30c9\u30e1\u30a4\u30f3\u3092\u5c55\u958b\u3059\u308b\u969b\u306bsmb.conf\u30d5\u30a1\u30a4\u30eb\u304c\uff08\u518d\uff09\u4f5c\u6210\u30fb\u914d\u7f6e\u3055\u308c\u307e\u3059\u304c\u3001\u3059\u3067\u306bsmb.conf\u30d5\u30a1\u30a4\u30eb\u304c\u5b58\u5728\u3059\u308b\u3068\u30a8\u30e9\u30fc\u3068\u306a\u308b\u305f\u3081\u3001\u4e8b\u524d\u306b\u524a\u9664\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n


\n <\/p>\n

\u5165\u529b\u9805\u76ee\u3092\u9806\u306b\u89e3\u8aac\u3057\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u3044\u304d\u306a\u308a”Realm”\u3084”Domain”\u3068\u4f3c\u305f\u3088\u3046\u306a\u3053\u3068\u3092\u805e\u304b\u308c\u3066\uff08\u3042\u308b\u3044\u306f\u3001\u4f55\u3092\u805e\u304b\u308c\u3066\u3044\u308b\u306e\u304b\u304c\u308f\u304b\u3089\u305a\uff09\u56f0\u60d1\u3059\u308b\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u3002AD\u306b\u304a\u3051\u308b\u30c9\u30e1\u30a4\u30f3\u540d\uff08\u3068\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u540d\uff09\u306b\u306fNetBIOS\u30c9\u30e1\u30a4\u30f3\u540d\u3068DNS\u30c9\u30e1\u30a4\u30f3\u540d\u304c\u3042\u308a\u3001\u3053\u3053\u3067\u306f\u3053\u306e2\u3064\u306e\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u305d\u308c\u305e\u308c\u805e\u304b\u308c\u3066\u3044\u307e\u3059[8]\u3002<\/p>\n

<\/p>\n

“Realm”\u306fDNS\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u805e\u304b\u308c\u3066\u3044\u308b\u305f\u3081\u3001\u4eca\u56de\u306e\u5834\u5408\u306fexample.com\u3068\u5165\u529b\u3057\u307e\u3059\u3002ADDS\u3067\u30c9\u30e1\u30a4\u30f3\u3092\u4f5c\u6210\u3059\u308b\u969b\u306e\u300cActive Directory \u30c9\u30e1\u30a4\u30f3 \u30b5\u30fc\u30d3\u30b9\u69cb\u6210\u30a6\u30a3\u30b6\u30fc\u30c9\u300d\u3068\u306e\u5bfe\u5fdc\u3067\u3044\u3046\u3068\u3001\u6700\u521d\u306b\u5165\u529b\u3059\u308b\u30c9\u30e1\u30a4\u30f3\u540d\u306b\u5bfe\u5fdc\u3057\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u4ed6\u65b9\u3001”Domain”\u306fNetBIOS\u306e\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u5165\u529b\u3059\u308b\u9805\u76ee\u3067\u3059\u3002\u4ed6\u306e\u30c9\u30e1\u30a4\u30f3\u3068\u91cd\u8907\u3057\u306a\u3044\u9650\u308a\u306f\u3001DNS\u30c9\u30e1\u30a4\u30f3\u3092\u30c9\u30c3\u30c8\u3067\u533a\u5207\u3063\u305f\u4e00\u756a\u5de6\u306e\u90e8\u5206\uff08\u4eca\u56de\u306e\u5834\u5408\u306fexample\uff09\u306e\u5024\u3092\u63a1\u7528\u3059\u308b\u3053\u3068\u304c\u4e00\u822c\u7684\u3067\u3059\u3002\u30d7\u30ed\u30f3\u30d7\u30c8\u306b[example]\u3068\u306a\u3063\u3066\u3044\u308b\u3088\u3046\u306b\u30c7\u30d5\u30a9\u30eb\u30c8\u5024\u3082\u305d\u3046\u306a\u3063\u3066\u304a\u308a\u3001\u4eca\u56de\u306f\u305d\u306e\u307e\u307eEnter\u3092\u62bc\u3057\u3066\u78ba\u5b9a\u3057\u307e\u3059\u3002\u540c\u3058\u304f\u3001ADDS\u306e\u69cb\u6210\u30a6\u30a3\u30b6\u30fc\u30c9\u3068\u306e\u5bfe\u5fdc\u3067\u3044\u3046\u3068\u3001\u300c\u2060\u8ffd\u52a0\u30aa\u30d7\u30b7\u30e7\u30f3\u300d\u3067\u805e\u304b\u308c\u308bNetBIOS\u30c9\u30e1\u30a4\u30f3\u540d\u306b\u5bfe\u5fdc\u3057\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

[8] \u6b74\u53f2\u7684\u306bWindows\u3067\u306fNetBIOS\/WINS\u3068\u3044\u3046\u4ed5\u7d44\u307f\u306b\u540d\u524d\u89e3\u6c7a\u3092\u4f9d\u5b58\u3057\u3066\u3044\u305f\u6642\u4ee3\u304c\u3042\u308a\u3001\u73fe\u5728\u3082\u305d\u306e\u540d\u6b8b\u304c\u3042\u308a\u307e\u3059\uff08\u3068\u3044\u3046\u304b\u3001\u73fe\u5728\u3067\u3082\u4f7f\u3048\u307e\u3059\uff09\u3002AD\u306e\u524d\u8eab\u3067\u3042\u308bWindows NT\u30c9\u30e1\u30a4\u30f3\u3067\u3082\u540d\u524d\u89e3\u6c7a\u306b\u306fNetBIOS\/WINS\u304c\u4f7f\u308f\u308c\u3066\u3044\u307e\u3057\u305f\u3002AD\u3067\u306f\u540d\u524d\u89e3\u6c7a\u306bDNS\u304c\u4f7f\u308f\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u304c\u3001\u3053\u306e\u3088\u3046\u306a\u6b74\u53f2\u7684\u7d4c\u7def\u3084NT\u30c9\u30e1\u30a4\u30f3\u3068\u306e\u4e92\u63db\u6027\u78ba\u4fdd\u3092\u7406\u7531\u306b\u3001AD\u30c9\u30e1\u30a4\u30f3\u3084Windows\u30de\u30b7\u30f3\u306b\u306fNetBIOS\u540d\u3092\u6301\u305f\u305b\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

“Server Role”\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u306edc\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u306e\u3067\u3001\u7a7a\u6b04\u306e\u307e\u307eEnter\u3092\u62bc\u3057\u3066\u3053\u306e\u30de\u30b7\u30f3\u3092DC\u3068\u3057\u3066\u30c9\u30e1\u30a4\u30f3\u3092\u30c7\u30d7\u30ed\u30a4\u3059\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n

<\/p>\n

“DNS backend”\u3067\u306fDC\u306e\u6301\u3064DNS\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308b\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u9078\u629e\u3092\u9078\u629e\u3057\u307e\u3059\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u306fSamba\u306b\u30d3\u30eb\u30c8\u30a4\u30f3\u3055\u308c\u305fDNS\u30b5\u30fc\u30d0\u30fc\u6a5f\u80fd\uff08SAMBA_INTERNAL\uff09\u304c\u4f7f\u7528\u3055\u308c\u307e\u3059\u304c\u3001BIND[9]\u3082\u9078\u629e\u3067\u304d\u307e\u3059\u3002\u4eca\u56de\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u306eSAMBA_INTERNAL\u3067\u9032\u3081\u308b\u305f\u3081\u3001\u305d\u306e\u307e\u307eEnter\u3092\u62bc\u3057\u3066\u78ba\u5b9a\u3057\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

[9] BIND\u3092\u4f7f\u3046\u5834\u5408\u3001BIND9_DLZ\u3092\u9078\u629e\u3057\u307e\u3059\u3002BIND9_FLATFILE\u306f\u73fe\u5728\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u305a\u3001\u524a\u9664\u4e88\u5b9a\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

“DNS forwarder IP address”\u306b\u306fDNS\u30d5\u30a9\u30ef\u30fc\u30c0\u30fc\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092\u5165\u529b\u3057\u307e\u3059\u3002\u901a\u5e38\u3001\u30c9\u30e1\u30a4\u30f3\u306eDNS\u30b5\u30fc\u30d0\u30fc\uff08\u4eca\u56de\u306e\u69cb\u6210\u3067\u306fDC\uff09\u306f\u30c9\u30e1\u30a4\u30f3\u306e\u30de\u30b7\u30f3\u304b\u3089\u306e\u69d8\u3005\u306a\u540d\u524d\u89e3\u6c7a\u3092\u4e00\u624b\u306b\u5f15\u304d\u53d7\u3051\u308b\u3053\u3068\u306b\u306a\u308a\u307e\u3059\u304c\u3001\u81ea\u529b\u3067\u540d\u524d\u89e3\u6c7a\u3067\u304d\u308b\u7bc4\u56f2\u306f\u4eca\u56de\u4f5c\u6210\u3059\u308b\u30c9\u30e1\u30a4\u30f3\uff08example.com\uff09\u306b\u9650\u3089\u308c\u307e\u3059\u3002\u305d\u306e\u305f\u3081\u3001\u30c9\u30e1\u30a4\u30f3\u5916\u306e\u30ea\u30bd\u30fc\u30b9\u306e\u540d\u524d\u89e3\u6c7a\u3092\u4f9d\u983c\u3055\u308c\u305f\u3068\u304d\u306b\u3001\u305d\u306e\u4f9d\u983c\u3092\u8ee2\u9001\u3059\u308b\u5148\u3092\u6307\u5b9a\u3059\u308b\u306e\u304c\u3053\u306e\u9805\u76ee\u3067\u3059[10]\u3002Ubuntu Server 24.04 LTS\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u76f4\u5f8c\u3067\u306f127.0.0.53\u304c”DNS forwarder IP address”\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u5024\u3068\u306a\u3063\u3066\u3044\u307e\u3059[11]\u304c\u3001\u3053\u308c\u306f\u30b9\u30bf\u30d6\u30e2\u30fc\u30c9\u3067\u52d5\u4f5c\u3057\u3066\u3044\u308bsystemd-resolved\u306e\u30a2\u30c9\u30ec\u30b9\u3067\u3059\u3002\u3053\u306e\u3042\u3068systemd-resolved\u306f\u4f7f\u7528\u3067\u304d\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u3001\u74b0\u5883\u306b\u5408\u308f\u305b\u3066\uff08\u4eca\u56de\u306f192.168.1.1\u306b\uff09\u5024\u3092\u5909\u66f4\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

[10] \u4e00\u822c\u7684\u306a\u3054\u5bb6\u5ead\u3060\u3068\u3001\u30d6\u30ed\u30fc\u30c9\u30d0\u30f3\u30c9\u30eb\u30fc\u30bf\u30fc\u306bDNS\u306e\u6a5f\u80fd\u304c\u3042\u308a\u3001\u305d\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092\u6307\u5b9a\u3059\u308b\u3053\u3068\u306b\u306a\u308b\u306f\u305a\u3067\u3059\u3002\u3088\u304f\u308f\u304b\u3089\u306a\u3044\u5834\u5408\u306f\u3001\u4e00\u65e6Ctrl+C\u3067\u629c\u3051\u3066\u3001resolvectl status\u30b3\u30de\u30f3\u30c9\u3067\u73fe\u5728\u53c2\u7167\u3057\u3066\u3044\u308bDNS\u30b5\u30fc\u30d0\u30fc\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n


\n
\n <\/p>\n

[11] \/etc\/resolv.conf\u304b\u3089\u8aad\u307f\u53d6\u3063\u305f\u5024\u3068\u8003\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

“Administrator password”\u306b\u306fAdministrator\u30e6\u30fc\u30b6\u30fc\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3057\u307e\u3059\u3002\u78ba\u8a8d\u306e\u305f\u3081\u3082\u3046\u4e00\u5ea6\u5165\u529b\u3057\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u3059\u308b\u3068\u3001\u4f55\u3084\u3089\u5927\u91cf\u306e\u30ed\u30b0\u304c\u6d41\u308c\u307e\u3059\u304c\u3001\u6700\u5f8c\u306b\u6b21\u306e\u3088\u3046\u306a\u30ed\u30b0\u304c\u51fa\u3066\u3001\u30b3\u30de\u30f3\u30c9\u3092\u629c\u3051\u308b\u306f\u305a\u3067\u3059\u3002<\/p>\n


\nINFO 2025-02-24 14:04:05,105 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #2432: A Kerberos configuration suitable for Samba AD has been generated at \/var\/lib\/samba\/private\/krb5.conf
\nINFO 2025-02-24 14:04:05,105 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #2434: Merge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!
\nINFO 2025-02-24 14:04:05,157 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #2102: Setting up fake yp server settings
\nINFO 2025-02-24 14:04:05,182 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #493: Once the above files are installed, your Samba AD server will be ready to use
\nINFO 2025-02-24 14:04:05,182 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #498: Server Role: active directory domain controller
\nINFO 2025-02-24 14:04:05,183 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #499: Hostname: samba-ad-dc01
\nINFO 2025-02-24 14:04:05,183 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #500: NetBIOS Domain: EXAMPLE
\nINFO 2025-02-24 14:04:05,183 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #501: DNS Domain: example.com
\nINFO 2025-02-24 14:04:05,183 pid:3170 \/usr\/lib\/python3\/dist-packages\/samba\/provision\/__init__.py #502: DOMAIN SID: S-1-5-21-1227575069-1623886296-1303063441
\n <\/p>\n

\u3061\u306a\u307f\u306b–use-rfc2307\u3068\u3044\u3046\u30aa\u30d7\u30b7\u30e7\u30f3\u306f\u3001RFC 2307\u306b\u5f93\u3044\u3001LDAP\uff08\u30c9\u30e1\u30a4\u30f3\uff09\u306e\u30b9\u30ad\u30fc\u30de\u3092\u62e1\u5f35\u3057\u3001UID\u3084GID\u3001\u30db\u30fc\u30e0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3084\u30ed\u30b0\u30a4\u30f3\u30b7\u30a7\u30eb\u306a\u3069\u306ePOSIX\u306e\u5c5e\u6027\u3092\u4fdd\u7ba1\u3055\u305b\u308b\u3068\u3044\u3046\u8a2d\u5b9a\u3067\u3059\uff08\u3053\u306e\u3042\u305f\u308a\u306e\u30e6\u30fc\u30b6\u30fc\u5c5e\u6027\u306e\u8a2d\u5b9a\u306b\u3064\u3044\u3066\u306f\u3001\u4eca\u5f8c\u306e\u56de\u3067\u89e6\u308c\u308b\u4e88\u5b9a\u3067\u3059\u2060\uff09\u2060\u3002\u3042\u3068\u304b\u3089\u62e1\u5f35\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u624b\u52d5\u64cd\u4f5c\u304c\u5fc5\u8981\u3067\u9762\u5012\u3001\u304b\u3064\u3001\u6307\u5b9a\u3057\u3066\u304a\u3044\u3066\u3082\u7279\u306b\u30c7\u30e1\u30ea\u30c3\u30c8\u3082\u306a\u3044\u305f\u3081\u3001\u30c9\u30e1\u30a4\u30f3\u4f5c\u6210\u6642\u306b\u8a2d\u5b9a\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u3053\u3053\u3067\u751f\u6210\u3055\u308c\u305fsmb.conf\u306e\u8a2d\u5b9a\u5024\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n


\nsamba-ad-dc01$ cat \/etc\/samba\/smb.conf
\n# Global parameters
\n[global]
\n dns forwarder = 192.168.1.1
\n netbios name = SAMBA-AD-DC01
\n realm = EXAMPLE.COM
\n server role = active directory domain controller
\n workgroup = EXAMPLE
\n idmap_ldb:use rfc2307 = yes
\n
\n[sysvol]
\n path = \/var\/lib\/samba\/sysvol
\n read only = No
\n
\n[netlogon]
\n path = \/var\/lib\/samba\/sysvol\/example.com\/scripts
\n read only = No
\n <\/p>\n

\u3061\u306a\u307f\u306b\u3001\u4e0a\u3067\u306f\u30a4\u30f3\u30bf\u30e9\u30af\u30c6\u30a3\u30d6\u306b\u30c9\u30e1\u30a4\u30f3\u3092\u5c55\u958b\u3057\u307e\u3057\u305f\u304c\u3001\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u4f7f\u3063\u3066DNS\u30d5\u30a9\u30ef\u30fc\u30c0\u30fc\u3092\u9664\u304f\u5404\u5024\u3092\u5f15\u304d\u6e21\u3059\u3053\u3068\u3082\u53ef\u80fd\u3067\u3059[12]\u3002<\/p>\n


\nsamba-ad-dc01$ sudo samba-tool domain provision –domain example –realm example.com –adminpass –server-role dc –use-rfc2307 –dns-backend SAMBA_INTERNAL
\n <\/p>\n

\u305f\u3060\u3057\u3001DNS\u30d5\u30a9\u30ef\u30fc\u30c0\u30fc\u3092\u6307\u5b9a\u3059\u308b\u30aa\u30d7\u30b7\u30e7\u30f3\u306f\u306a\u3044\u306e\u3067\u3001\u3053\u3053\u3060\u3051\u306f\u3042\u3068\u304b\u3089smb.conf\u3092\u7de8\u96c6\u3057\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

[12] \u306a\u304a\u3001Administrator\u30e6\u30fc\u30b6\u30fc\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30d2\u30b9\u30c8\u30ea\u306b\u6b8b\u3059\u3053\u3068\u306b\u62b5\u6297\u304c\u3042\u308b\u5834\u5408\u306f\u3001–adminpass\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u7701\u7565\u3067\u304d\u307e\u3059\u3002\u305d\u306e\u5834\u5408\u3001\u30e9\u30f3\u30c0\u30e0\u306a\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u751f\u6210\u3055\u308c\u3001\u30ed\u30b0\u306e\u4e2d\u306b”Admin password”\u3068\u3057\u3066\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002\u305d\u306e\u5185\u5bb9\u3092\u30e1\u30e2\u306b\u3068\u3063\u3066\u304a\u304d\u3001\u3042\u3068\u304b\u3089\u304a\u597d\u307f\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u306b\u5909\u66f4\u3059\u308b\u3068\u3044\u3046\u6d41\u308c\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n


\n <\/p>\n

Samba AD DC\u306e\u8a2d\u5b9a\u304c\u5b8c\u4e86\u3057\u305f\u3089\u3001DNS\u5468\u308a\u306e\u8a2d\u5b9a\u3092\u304a\u3053\u306a\u3044\u307e\u3059\u3002\u4eca\u56de\u3001Samba AD DC\u81ea\u8eab\u306bDNS\u30b5\u30fc\u30d0\u30fc\u306e\u6a5f\u80fd\u3092\u6301\u305f\u305b\u305f\u306e\u3067\u3001\u30c9\u30e1\u30a4\u30f3\u306e\u30e1\u30f3\u30d0\u30fc\u30b5\u30fc\u30d0\u30fc\u7b49\u304b\u3089\u306e\u540d\u524d\u89e3\u6c7a\u30ea\u30af\u30a8\u30b9\u30c8\u3092TCP\/UDP 53\u3067\u53d7\u3051\u4ed8\u3051\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u4e00\u65b9\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u52d5\u4f5c\u3057\u3066\u3044\u308bsystemd-resolvd\u3082TCP\/UDP 53\u3067\u30ea\u30b9\u30f3\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u307e\u307e\u3060\u3068\u30dd\u30fc\u30c8\u304c\u7af6\u5408\u3057\u3066\u30a8\u30e9\u30fc\u306b\u306a\u308b\u306e\u3067\u3001\u5148\u307b\u3069\u89e6\u308c\u305f\u901a\u308a\u3001systemd-resolvd\u3092\u505c\u6b62\u30fb\u7121\u52b9\u5316\u3057\u307e\u3059\u3002<\/p>\n


\nsamba-ad-dc01$ sudo unlink \/etc\/resolv.conf
\nsamba-ad-dc01$ cat
\n> nameserver 127.0.0.1
\n> search example.com
\n> EOF
\nsamba-ad-dc01$ sudo systemctl disable systemd-resolved –now
\n <\/p>\n

\u307e\u305f\u3001\uff08\u2060\u30c9\u30e1\u30a4\u30f3\u4f5c\u6210\u6642\u306e\u30ed\u30b0\u30e1\u30c3\u30bb\u30fc\u30b8\uff08\u629c\u7c8b1\u884c\u76ee\uff09\u306b\u3082\u3042\u308b\u3088\u3046\u306b\uff09Kerberos\u8a8d\u8a3c\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092samba-tool\u304c\u751f\u6210\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u3067\u7f6e\u304d\u63db\u3048\u307e\u3059\u3002<\/p>\n


\nsamba-ad-dc01$ sudo cp -f \/var\/lib\/samba\/private\/krb5.conf \/etc\/krb5.conf
\n <\/p>\n

\u3053\u308c\u3067\u6e96\u5099\u304c\u6574\u3063\u305f\u306e\u3067\u3044\u3088\u3044\u3088\u30b5\u30fc\u30d3\u30b9\u3092\u6709\u52b9\u5316\u30fb\u8d77\u52d5\u3055\u305b\u307e\u3059\u3002<\/p>\n


\nsamba-ad-dc01$ sudo systemctl enable samba-ad-dc –now
\n <\/p>\n

\u3053\u3053\u3067\u52d5\u4f5c\u78ba\u8a8d\u3092\u3057\u3066\u304a\u304d\u307e\u3057\u3087\u3046\u3002<\/p>\n

<\/p>\n

\u307e\u305a\u306f\u3001AD\u30e6\u30fc\u30b6\u30fc\u3067\u306e\u8a8d\u8a3c\u304c\u6210\u529f\u3059\u308b\u304b\u3092kinit\u3067AD\u30e6\u30fc\u30b6\u30fc\u3068\u3057\u3066\u8a8d\u8a3c\u3057\u3066Kerberos\u30c1\u30b1\u30c3\u30c8\u3092\u53d7\u3051\u53d6\u308a\u3001klist\u3067\u53d7\u3051\u53d6\u3063\u305f\u30c1\u30b1\u30c3\u30c8\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3059\u3002\u6b21\u306e\u3088\u3046\u306a\u8868\u793a\u306b\u306a\u3063\u3066\u3044\u308c\u3070Administrator\u30e6\u30fc\u30b6\u30fc\uff08\u30d7\u30ea\u30f3\u30b7\u30d1\u30eb\uff09\u3068\u3057\u3066Kerberos\u30c1\u30b1\u30c3\u30c8\u3092\u53d6\u5f97\u3067\u304d\u304a\u308a\u3001\u554f\u984c\u306a\u304f\u52d5\u4f5c\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n


\namba-ad-dc01:~$ kinit Administrator
\nPassword for Administrator@EXAMPLE.COM:
\nWarning: Your password will expire in 41 days on Mon 07 Apr 2025 02:04:04 PM UTC
\nsamba-ad-dc01:~$ klist
\nTicket cache: FILE:\/tmp\/krb5cc_1000
\nDefault principal: Administrator@EXAMPLE.COM
\n
\nValid starting Expires Service principal
\n02\/24\/2025 14:06:55 02\/25\/2025 00:06:55 krbtgt\/EXAMPLE.COM@EXAMPLE.COM
\n renew until 02\/25\/2025 14:06:52
\n <\/p>\n

\u307e\u305f\u3001AD\u306fDNS\u306b\u4f9d\u5b58\u3059\u308b\u305f\u3081\u3001\u540d\u524d\u89e3\u6c7a\u6a5f\u80fd\u306e\u52d5\u4f5c\u72b6\u6cc1\u3092\u78ba\u8a8d\u3057\u3066\u304a\u304d\u307e\u3059\u3002SRV\u30ec\u30b3\u30fc\u30c9\u3092\u5f15\u3044\u3066\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n


\nsamba-ad-dc01$ for srv in _ldap._tcp _kerberos._tcp _kerberos._udp _kpasswd._udp; do echo -n “${srv}.example.com: “; dig @localhost +short -t SRV ${srv}.example.com; done
\n_ldap._tcp.example.com: 0 100 389 samba-ad-dc01.example.com.
\n_kerberos._tcp.example.com: 0 100 88 samba-ad-dc01.example.com.
\n_kerberos._udp.example.com: 0 100 88 samba-ad-dc01.example.com.
\n_kpasswd._udp.example.com: 0 100 464 samba-ad-dc01.example.com.
\n <\/p>\n

\u78ba\u8a8d\u3057\u305f\u30ec\u30b3\u30fc\u30c9\u306e\u8a73\u7d30\uff08\u304a\u7d04\u675f\uff09\u3092\u77e5\u308a\u305f\u3044\u5834\u5408\u306fSRV Records Registered by Net Logon\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n


\n\u30c9\u30e1\u30a4\u30f3\u53c2\u52a0 <\/p>\n

\u6700\u7d42\u7684\u306b\u306fDC2\u53f0\u69cb\u6210\u3092\u76ee\u6307\u3057\u3066\u3044\u307e\u3059\u304c\u30011\u53f0\u69cb\u7bc9\u3057\u305f\u6642\u70b9\u3067Samba AD\u30c9\u30e1\u30a4\u30f3\u306f\u5229\u7528\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002\u305d\u306e\u305f\u3081\u3001\u3053\u3053\u3067Windows\u30de\u30b7\u30f3\u3092Samba AD\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3055\u305b\u3066\u3001\u52d5\u4f5c\u3092\u78ba\u304b\u3081\u3066\u307f\u307e\u3059\u3002\u306a\u304a\u3001\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3067\u304d\u308b\u306e\u306f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u7248Windows\u3060\u3068Pro\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3\u4ee5\u4e0a\u3067\u3059\u3002<\/p>\n

<\/p>\n

\u7e70\u308a\u8fd4\u3057\u306b\u306a\u308a\u307e\u3059\u304c\u3001\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3059\u308b\u306b\u306f\u3001DNS\u3067\u30c9\u30e1\u30a4\u30f3\u306e\u540d\u524d\u89e3\u6c7a\u304c\u3067\u304d\u306a\u3051\u308c\u3070\u306a\u308a\u307e\u305b\u3093\u3002\u305d\u306e\u305f\u3081\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30c0\u30d7\u30bf\u30fc\u306e\u8a2d\u5b9a\u3092\u5909\u66f4\u3057\u3001\u4eca\u56de\u69cb\u7bc9\u3057\u305f1\u53f0\u76ee\u306eSamba AD DC\u3092\u53c2\u7167\u5148\u306eDNS\u30b5\u30fc\u30d0\u30fc\u3068\u3057\u307e\u3059\u3002<\/p>\n


\n\u56f31 DNS\u8a2d\u5b9a\u306e\u5909\u66f4\u4f8b\uff08Windows 11\uff09
\n\"\"
\n <\/p>\n

\u6e96\u5099\u304c\u6574\u3063\u305f\u3089\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3057\u307e\u3059\u3002\u30b9\u30bf\u30fc\u30c8\u30dc\u30bf\u30f3\u3092\u53f3\u30af\u30ea\u30c3\u30af\u3057\u3001\u300c\u2060\u30b7\u30b9\u30c6\u30e0\u300d\u3092\u958b\u304f\u3068\u300c\u8a2d\u5b9a\u300d\u30a6\u30a3\u30f3\u30c9\u30a6\u304c\u958b\u304d\u307e\u3059\u3002\u300c\u2060\u30b7\u30b9\u30c6\u30e0\u306e\u8a73\u7d30\u8a2d\u5b9a\u300d\u3068\u3044\u3046\u9805\u76ee\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3068\u300c\u30b7\u30b9\u30c6\u30e0\u306e\u30d7\u30ed\u30d1\u30c6\u30a3\u300d\u304c\u958b\u304f\u305f\u3081\u3001\u300c\u2060\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u540d\u300d\u30bf\u30d6\u3092\u9078\u629e\u3057\u307e\u3059\u3002\u3059\u308b\u3068\u3001\u300c\u2060\u5909\u66f4\u300d\u3068\u3044\u3046\u30dc\u30bf\u30f3\u304c\u3042\u308b\u305f\u3081\u3001\u3053\u308c\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u5165\u529b\u3059\u308b\u3068\u3053\u308d\u304c\u3042\u308b\u305f\u3081\u3001example.com\u3068\u5165\u529b\u3057\u3001OK\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059[13]\u3002<\/p>\n


\n\u56f32 \u30c9\u30e1\u30a4\u30f3\u540d\u5909\u66f4\u753b\u9762\uff08Windows 11\uff09
\n\"\"
\n
\n <\/p>\n

[13] Windows 11\u306e\u5834\u5408\u3001\u4ed6\u306b\u3082\u30c9\u30e1\u30a4\u30f3\u3078\u306e\u53c2\u52a0\u65b9\u6cd5\u304c\u3042\u308b\u3088\u3046\u3067\u3059\u304c\u3001\uff08\u2060\u4e00\u5fdc\u307e\u3060\u30b5\u30dd\u30fc\u30c8\u671f\u9593\u304c\u6b8b\u3063\u3066\u3044\u308b\uff09Windows 10\u3067\u3082\u5171\u901a\u3057\u3066\u4f7f\u3048\u308b\u3053\u306e\u624b\u9806\u3092\u7d39\u4ecb\u3057\u307e\u3057\u305f\u3002\u306a\u304a\u3001\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u540d\u3092\u5909\u3048\u305f\u3044\u5834\u5408\u306f\u3053\u3053\u3067\u9069\u5b9c\u5909\u3048\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n


\n <\/p>\n

\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u3092\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3059\u308b\u305f\u3081\u306e\u6a29\u9650\u306e\u3042\u308bAD\u30e6\u30fc\u30b6\u30fc\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u6c42\u3081\u3089\u308c\u308b\u305f\u3081\u3001Administrator\u30e6\u30fc\u30b6\u30fc\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5165\u529b\u3057\u307e\u3059\u3002\u300c\u2060example.com \u30c9\u30e1\u30a4\u30f3\u3078\u3088\u3046\u3053\u305d\u3002\u300d\u3068\u3044\u3046\u30e1\u30c3\u30bb\u30fc\u30b8\u30dc\u30c3\u30af\u30b9\u304c\u51fa\u305f\u3089\u3001\u30c9\u30e1\u30a4\u30f3\u306b\u7121\u4e8b\u306b\u53c2\u52a0\u3067\u304d\u3066\u3044\u307e\u3059\u3002\u305d\u3057\u3066\u3001\u6307\u793a\u901a\u308a\u306bOS\u3092\u518d\u8d77\u52d5\u3057\u307e\u3059\u3002<\/p>\n

<\/p>\n

\u518d\u8d77\u52d5\u304c\u5b8c\u4e86\u3057\u305f\u3089\u3001\u6539\u3081\u3066\u30ed\u30b0\u30a4\u30f3\u3057\u307e\u3059\u304c\u3001\u4eca\u5ea6\u306fAD\u30e6\u30fc\u30b6\u30fc\u3067\u3042\u308bAdministrator\u30e6\u30fc\u30b6\u30fc\u3068\u3057\u3066\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u307f\u307e\u3059\u3002\u300c\u2060\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u300d\u3092\u9078\u629e\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u540d\u306bAdministrator@example.com\u307e\u305f\u306fexample.com\\Administrator\u3068\u5165\u529b\u3057\u3066\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3057\u307e\u3059\u3002<\/p>\n

<\/p>\n

AD\u306e\u7ba1\u7406\u30c4\u30fc\u30eb\u306f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5411\u3051Windows\u3067\u3082\u30aa\u30d7\u30b7\u30e7\u30f3\u6a5f\u80fd\u3068\u3057\u3066\u5c0e\u5165\u3067\u304d\u307e\u3059[14]\u3002\u5148\u7a0b\u540c\u3058\u624b\u9806\u3067\u300c\u8a2d\u5b9a\u300d\u30a6\u30a3\u30f3\u30c9\u30a6\u306e\u300c\u30b7\u30b9\u30c6\u30e0\u300d\u3092\u958b\u304d\u300c\u30aa\u30d7\u30b7\u30e7\u30f3\u6a5f\u80fd\u300d\u306b\u79fb\u308a\u307e\u3059\u3002Windows 11\u306e\u5834\u5408\u306f\u300c\u30aa\u30d7\u30b7\u30e7\u30f3\u6a5f\u80fd\u3092\u8ffd\u52a0\u3059\u308b\u300d\u6a2a\u306e\u300c\u6a5f\u80fd\u3092\u8868\u793a\u2060\u300d\u2060\u3001Windows 10\u306e\u5834\u5408\u306f\u300c\u6a5f\u80fd\u306e\u8ffd\u52a0\u300d\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002\u691c\u7d22\u30dc\u30c3\u30af\u30b9\u306b\u300cRSAT[15]\u300d\u3068\u5165\u529b\u3059\u308b\u3068Windows Server\u306e\u30ea\u30e2\u30fc\u30c8\u7ba1\u7406\u7528\u30c4\u30fc\u30eb\u304c\u62bd\u51fa\u3055\u308c\u307e\u3059\u306e\u3067\u6b21\u306e2\u3064\u306b\u30c1\u30a7\u30c3\u30af\u3092\u5165\u308c\u307e\u3059\u3002<\/p>\n


\n
\n\u300cRSAT: Active Directory Domain Services \u304a\u3088\u3073\u30e9\u30a4\u30c8\u30a6\u30a7\u30a4\u30c8 \u30c7\u30a3\u30ec\u30af\u30c8\u30ea \u30b5\u30fc\u30d3\u30b9 \u30c4\u30fc\u30eb\u300d
\n\u300cRSAT: \u30b0\u30eb\u30fc\u30d7 \u30dd\u30ea\u30b7\u30fc\u7ba1\u7406\u30c4\u30fc\u30eb\u300d
\n
\n\u56f33 RSAT\u306e\u8ffd\u52a0\u753b\u9762
\n\"\"
\n
\n <\/p>\n

[14] \u3082\u3057\uff08\u8a55\u4fa1\u7248\u306a\u3069\u3092\u5165\u624b\u3057\u3066\uff09Windows Server\u3092\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3055\u305b\u305f\u5834\u5408\u306f\u3001\u300c\u2060\u30b5\u30fc\u30d0\u30fc \u30de\u30cd\u30fc\u30b8\u30e3\u30fc\u300d\u304b\u3089\u300c\u6a5f\u80fd\u3068\u5f79\u5272\u306e\u8ffd\u52a0\u300d\u3092\u9078\u629e\u3057\u3001\uff08\u2060\u30c4\u30ea\u30fc\u3092\u8fbf\u3063\u3066\uff09\u6b21\u306e\u6a5f\u80fd\u306b\u30c1\u30a7\u30c3\u30af\u3092\u5165\u308c\u307e\u3059\uff1a\u300c\u30b0\u30eb\u30fc\u30d7 \u30dd\u30ea\u30b7\u30fc\u7ba1\u7406\u30c4\u30fc\u30eb\u300d\u304a\u3088\u3073\u300c\u30ea\u30e2\u30fc\u30c8 \u30b5\u30fc\u30d0\u30fc\u7ba1\u7406\u30c4\u30fc\u30eb\u2060\u300d\u2060-\u300c\u2060\u5f79\u5272\u7ba1\u7406\u30c4\u30fc\u30eb\u2060\u300d\u2060-\u300c\u2060AD DS \u304a\u3088\u3073 AD LDS \u30c4\u30fc\u30eb\u300d<\/p>\n


\n
\n <\/p>\n

[15] RSAT\u306f”Remote Server Administration Tools”\u306e\u7565\u3067\u3059\u3002RSAT\u306e\u8a73\u7d30\u306f\u3053\u3061\u3089\u304b\u3089\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002<\/p>\n


\n
\n <\/p>\n

\u30c4\u30fc\u30eb\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3067\u304d\u305f\u3089\u3001\u30b9\u30bf\u30fc\u30c8\u30e1\u30cb\u30e5\u30fc\u304b\u3089\u300cActive Directory \u30e6\u30fc\u30b6\u30fc\u3068\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u300d\u3092\u958b\u304d\u307e\u3059\u3002\u3059\u308b\u3068\u3001\u5de6\u5074\u306e\u30c4\u30ea\u30fc\u306b\u4eca\u56de\u69cb\u6210\u3057\u305fSamba AD\u30c9\u30e1\u30a4\u30f3example.com\u3068\u8868\u793a\u3055\u308c\u3066\u3044\u308b\u306f\u305a\u3067\u3059\u3002\u305d\u306e\u30c4\u30ea\u30fc\u3092\u958b\u3044\u305fDomain Controllers\u30d5\u30a9\u30eb\u30c0\u306b\u306fSAMBA-AD-DC01\u3068\u3044\u3046\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u304c\u3001Computers\u30d5\u30a9\u30eb\u30c0\u306b\u306f\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3055\u305b\u305f\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u304c\u898b\u3048\u308b\u3067\u3057\u3087\u3046\u3002<\/p>\n


\n\u56f34 \u300c\u2060Active Directory \u30e6\u30fc\u30b6\u30fc\u3068\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u300d\u3067\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u3092\u8868\u793a\u3057\u305f\u72b6\u614b
\n\"\"
\n <\/p>\n

Samba AD DC\u3067\u3042\u3063\u3066\u3082\u3001\u3053\u306e\u3088\u3046\u306bADDS\u306e\u7ba1\u7406\u7528\u30c4\u30fc\u30eb\u3067\u30c9\u30e1\u30a4\u30f3\u3084\u30c9\u30e1\u30a4\u30f3\u4e0a\u306e\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u306e\u60c5\u5831\u3092\u8868\u793a\u3055\u305b\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002ADDS\u4e92\u63db\u3092\u76ee\u6307\u3057\u3066\u3044\u308b\u3060\u3051\u306e\u3053\u3068\u306f\u3042\u308a\u307e\u3059\u3002<\/p>\n

<\/p>\n

Ubuntu\u30de\u30b7\u30f3\u306e\u30c9\u30e1\u30a4\u30f3\u53c2\u52a0\u624b\u9806\u306b\u3064\u3044\u3066\u306f\u7b2c837\u56de\u3067\u89e3\u8aac\u6e08\u307f\u306e\u305f\u3081\u3001\u672c\u7a3f\u3067\u306f\u5272\u611b\u3057\u307e\u3059\u3002\u3053\u3061\u3089\u306e\u8a18\u4e8b\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u305f\u3060\u3057\u3001Samba AD\u30c9\u30e1\u30a4\u30f3\u53c2\u52a0\u3057\u305f\u76f4\u5f8c\u306eUbuntu\u30de\u30b7\u30f3\u3067\u306fAD\u30e6\u30fc\u30b6\u30fc\u3067\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u306a\u3044\u5834\u5408\u304c\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u3044\u307e\u3059\u3002\u4e00\u5ea6\u30b7\u30b9\u30c6\u30e0\u3092\u518d\u8d77\u52d5\u3059\u308b\u3053\u3068\u3067\u3001\u624b\u5143\u306e\u74b0\u5883\u3067\u306f\u6539\u5584\u3067\u304d\u305f\u306e\u3067\u3001\u540c\u3058\u72b6\u6cc1\u306b\u9665\u3063\u305f\u5834\u5408\u306f\u30b7\u30b9\u30c6\u30e0\u306e\u518d\u8d77\u52d5\u3092\u8a66\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n


\n <\/p>\n

\u4eca\u56de\u306e\u4f5c\u696d\u3067\u3072\u3068\u307e\u305aDC1\u53f0\u69cb\u6210\u306eSamba AD\u304c\u69cb\u7bc9\u3067\u304d\u307e\u3057\u305f\u3002\u6b21\u56de\u306f\u4ee5\u4e0b\u306b\u3064\u3044\u3066\u89e3\u8aac\u3057\u307e\u3059\u3002<\/p>\n


\n
\n2\u53f0\u76ee\u306eDC\u306e\u69cb\u7bc9
\n\u30b0\u30eb\u30fc\u30d7\u30dd\u30ea\u30b7\u30fc\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\uff08GPO\uff09\u3092\u3088\u308a\u9069\u5207\u306b\u53d6\u308a\u6271\u3046\u305f\u3081\u306eSYSVOL\u30d5\u30a9\u30eb\u30c0\u306e\u69cb\u6210 <\/p>\n","protected":false},"excerpt":{"rendered":"

Samba\u306fWindows OS\u306e\u6301\u3064\u5404\u7a2e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u6a5f\u80fd\u3092\u5b9f\u88c5\u3057\u305f\u30d5\u30ea\u30fc\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3067\u3059\u3002\u4e2d\u3067\u3082\u3001\u5229\u7528\u3067\u304d\u308b\u30d5\u30a1\u30a4\u30eb\u5171\u6709\u30b5\u30fc\u30d0\u30fc\uff08\u7b2c85\u56de\uff09\u3084\u30d7\u30ea\u30f3\u30c8\u30b5\u30fc\u30d0\u30fc\uff08\u7b2c218\u56de\uff09\u306e\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308b\u3053\u3068\u306f\u6709\u540d\u3067\u3059\u3002 <\/p>\n","protected":false},"author":2,"featured_media":2274234,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[762827],"tags":[765987,23450,763397,109508,272439,762834,762833,299867,521918,259538,27714,765985,162246,779849,198002,763396,2662,762832],"class_list":{"0":"post-2437659","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-science-technology","8":"tag-active-directory","9":"tag-ad","10":"tag-gihyo-jp","11":"tag-os","12":"tag-samba","13":"tag-science-technology","14":"tag-science-news","15":"tag-smb","16":"tag-technology-news","17":"tag-ubuntu","18":"tag-27714","19":"tag-765985","20":"tag-162246","21":"tag-779849","22":"tag-198002","23":"tag-763396","24":"tag-2662","25":"tag-762832"},"share_on_mastodon":{"url":"https:\/\/wakoka.com\/@news\/114073443801951754","error":""},"_links":{"self":[{"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/posts\/2437659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/comments?post=2437659"}],"version-history":[{"count":0,"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/posts\/2437659\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/media\/2274234"}],"wp:attachment":[{"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/media?parent=2437659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/categories?post=2437659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wacoca.com\/news\/wp-json\/wp\/v2\/tags?post=2437659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}