gistfile1.sh

#!/bin/bash

# Set up Samba4 as Domain Controller

# To be run on a fresh install of Ubuntu Server 12.04 with no optional packages selected save SSH
# architecture is x86_64, but only 1 place in this script does it matter.





# Local Administrator provided Values:

REALMNAME="home.ianduffy.ie"
REALMNAMEALLCAPS="HOME.IANDUFFY.IE"
WINDOMAINNAME="HOME"
ADMINPASS="Pa$$w0rd"

# WINDOMAINNAME must be all-caps
# ADMINPASS must bed 8 or more chars, 1+ digits and 1+ upper and 1+ lower case letters



apt-get update
apt-get dist-upgrade
apt-get install samba4 krb5-user
mv /etc/samba/smb.conf /etc/samba/smb.conf.orig


chmod u+x /usr/share/samba/setoption.pl
apt-get install samba4-clients

/usr/share/samba/setup/provision --realm=$REALMNAME --domain=$WINDOMAINNAME --adminpass=$ADMINPASS --server-role=dc
service samba stop
service bind9 stop

mkdir /srv/sambashares
mkdir /srv/sambashares/mainshare

cat << EOF >>/etc/samba/smb.conf
[mainshare]
        path = /srv/sambashares/mainshare
        read only = No
EOF



echo "include \"/etc/bind/named.conf.samba\";" >>/etc/bind/named.conf.local 
chown root:bind  /var/lib/samba/private/named.conf
mv /var/lib/samba/private/named.conf /etc/bind/named.conf.samba

cat << EOF >>/etc/apparmor.d/local/usr.sbin.named
/var/lib/samba/private/dns/** rwk,
/usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9.so rm,
/usr/lib/x86_64-linux-gnu/samba/gensec/krb5.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/asq.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/ldap.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/paged_results.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/paged_searches.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/rdn_name.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/acl.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/acl_read.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/anr.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/acl.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/aclread.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/anr.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/descriptor.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/dirsync.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/extended_dn_in.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/extended_dn_out.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/extended_dn_store.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/ildap.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/instancetype.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/lazy_commit.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/ldbsamba_extensions.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/linked_attributes.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/local_password.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/new_partition.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/objectclass.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/objectclass_attrs.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/objectguid.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/operational.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/partition.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/password_hash.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/ranged_results.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/repl_meta_data.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/resolve_oids.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/rootdse.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/samba3sam.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/samba3sid.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/samba_dsdb.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/samba_secrets.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/samldb.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/schema_data.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/schema_load.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/show_deleted.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/simple_dn.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/simple_ldap_map.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/subtree_delete.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/subtree_rename.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/update_keytab.so rm,
/usr/lib/x86_64-linux-gnu/samba/ldb/wins_ldb.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/sample.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/server_sort.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/skel.so rm,
/usr/lib/x86_64-linux-gnu/ldb/modules/ldb/tdb.so rm,
EOF

service apparmor restart
service bind9 start
service samba start


kinit administrator@$REALMNAMEALLCAPS