charon:~#  virt-install --virt-type kvm --name controller --location /home/sfroehli/debian-buster-DI-alpha5-amd64-netinst.iso --os-variant debian9 --memory 512 --disk size=4 &

sokrates:~$ virt-viewer --connect qemu+ssh://root@charon.synth.intern/system controller &

Debian-Installation durchführen

Hostname: controller
Domain: synthesis.synth.intern
ftp-host: ftp.at.debian.org

controller:~# apt-get install samba winbind smbclient heimdal-clients ldb-tools
controller:`# apt-get install acl attr ntp dnsutils
controller:~# apt-get install sudo vim lsof strace ltrace tcpdump

[Kerberos]
realm: SYNTHESIS.SYNTH.INTERN
Kerberos server: <empty>
Kerberos admin server: <empty>

controller:~# update-alternatives --all
controller:~# vigr
adm + sudo ergänzen

controller:~# service smbd stop
controller:~# service nmbd stop

controller:~# vi /etc/network/interfaces
iface enp1s0 inet static
	address 192.168.1.11
	netmask 255.255.255.0
	gateway 192.168.1.1

controller:~# vi /etc/hosts
192.168.1.11 controller.synthesis.synth.intern controller

controller:~# rm /var/lib/samba/*.tdb
controller:~# rm /var/lib/samba/*/*.tdb
controller:~# rm /var/cache/samba/*.tdb
controller:~# rm /var/cache/samba/*/*.tdb
controller:~# rm /run/samba/*.tdb
controller:~# rm /etc/samba/smb.conf

controller:~# vi /etc/resolv.conf
search synthesis.synth.intern
nameserver 192.168.1.11

controller:~# reboot

controller:~# samba-tool domain provision --use-rfc2307 --realm synthesis.synth.intern --domain SYNTHESIS --dns-backend SAMBA_INTERNAL --server-role dc --adminpass XXXXXXX

controller:~# ldbedit -H /var/lib/samba/private/sam.ldb '(samaccountname=Domain Users)'
gidNumber: 10000

controller:~# samba-tool group add "Unix Admins" --gid-number=11000 --nis-domain=SYNTHESIS
controller:~# samba-tool group addmembers Administrators "Unix Admins"

controller:~# vi /etc/samba/smb.conf
dns forwarder = 192.168.1.12

controller:~# cp /var/lib/samba/private/krb5.conf /etc/

controller:~# samba 
controller:~# smbclient -L localhost -U%
controller:~# smbclient //localhost/netlogon -UAdministrator -c 'ls'

controller:~# samba-tool user create test abcde12345, --given-name=Max --surname=Mustermann --uid-number=10001 --login-shell=/bin/bash --gid-number=10000 --profile-path=//herakles/profiles/test --home-drive=P: --home-directory=//herakles/users/test --unix-home=/home/test
controller:~# samba-tool group addmembers "Unix Admins" test