docker-samba-ad-dc

ubuntu based docker container for samba active directory server

This was inspired by other older docker containers that either don't work or use completely outdated versions of samba. To fullfill my own requirements, I wrote this from scratch.

Limitations

The container needs a macvtap based network. You may try other network types, however you have been warned, it will most likely not work without problems.

Running

Setup your own samba.env file with your choice of options by copying the example.

cp samba.env.example samba.env

Then start the container. It will immediatly provision the domain and start samba afterwards.

Environment Variables explained

The environment variables are passed on to the domain provising of samba-tool. For in-depth information see the fine Samba Wiki on samba-tool.

parameter	purpose
SAMBA_DC_HOSTNAME=dc	Hostname of the containerized domain controller. If you change this, you will need to change the hostname in the dockerfile as well.
SAMBA_DC_HOSTIP=	should be left alone (is a leftover from trying to make it work with host network)
SAMBA_DC_ADMIN_PASSWD=replacePassword	Yeah for real, please change this to something secure.
SAMBA_DC_REALM=my.domain	replace with your active directory domain name
SAMBA_DNS_BACKEND=SAMBA_INTERNAL	should be left alone
SAMBA_DNS_FORWARDER=192.168.1.254	Sets the dns server that dns queries are forwarded to.
SAMBA_NOCOMPLEXPWD=true	If true then sets the password complexity to off, expiry and password history is turned off as well, otherwise password complexity is left alone.

Volumes

As the docker file defines, and the docker-compose file configures, those are the volumes:

volume	purpose
/etc/samba	config files
/var/lib/samba	sysvolume
/var/log/samba	logfiles
/srv/shares	shares and their files

You can point those to the paths of your liking, e.g:

      - /srv/docker/samba/etc:/etc/samba:rw
      - /srv/docker/samba/sys:/var/lib/samba:rw
      - /srv/docker/samba/log:/var/log/samba:rw
      - /srv/docker/samba/shares:/srv/shares:rw

Joining a domain as a dc

Be warned, this are my own notes and may or may not work!

add to .env file:

parameter	purpose
SAMBA_PROVISION_TYPE=JOIN	provisioning type: DC for standalone domain controller
or JOIN for joining an existing domain

• hot backup idmap

• rsync sysvol SysVol replication

fsmo transfer / seizure

Ideas shamelessly copied from Samba documentation - fsmo

samba-tool fsmo show

samba-tool fsmo transfer --role=...

check things

samba-tool fsmo show

demote old dc

!!! On the old dc run the following command

samba-tool domain demote -Uadministrator

Shameless copy from Samba documentation

Building

You can either use the following command to build the docker image for the samba ad dc:

build.sh

or simple use docker-compose

docker-compose build

There are other docker-compose files present that will most likely not work as expected.