samba active directory tools for windows admins · samba active directory tools for windows admins...

56
Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) David Mulder SUSE Labs Software Engineer SUSE/[email protected]

Upload: others

Post on 22-Mar-2020

30 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

Samba Active Directory tools for Windows AdminsADUC and ADSI Edit in Linux (via YaST)

David MulderSUSE Labs Software EngineerSUSE/[email protected]

Page 2: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

2

To get the source code

github.com/orgs/yast/teams/samba-team

Page 3: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

3

Introduction

●What is SUSE?●What is YaST?●Prerequisites to YaST AD tools

● yast-python-bindings

Page 4: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

4

What is SUSE?

Page 5: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

1991 – The Birth of Linux

Page 6: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

SUSE Timeline

1992

S.u.S.E. founded(German acronymfor “Software undSystem-Entwicklung).

SLS is released,it’s the first comprehensiveLinux distribution.

1996

S.u.S.E Linux 4.2 is the first true SUSEdistribution.

YaST released.

1997-1998

SUSE becomesEurope’s leading Linux distribution.

SUSE enters North America market.

1992 to 2000The Pioneering Years

1999

IBM, SAP and Oracle partnerships announced.

SUSE Linux Enterprise Server released.

SUSE enters Asia Pacific market.

1994

S.u.S.E Linux 1.0 ships on floppies.

2000

YaST re-written.

SUSE Linux Enterprise Server released.

SUSE Linux Enterprise Server for IBM s/390.

SUSE helps AMD port Linux to x86-64 architecture.

22

Page 7: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

2001 to 2010Building a Strong Ecosystem

23

2004

openSUSE Launched.

2006

Microsoft and SUSE announce interoperability agreement.

SUSE offers first Enterprise virtualization technology integration for Linux (Xen).

2002-2003

SUSE acquired by Novell

Intel, AMD, HP, Fujitsu and other major partnerships announced.

2001

SUSE Linux EnterpriseServer forx86 released.

2009

SUSE Linux EnterpriseServer 11 released with KVM.

SUSE Studio launched.

2010

VMware partnership announced.

SUSE Linux Enterprise available on Amazon EC2.

Page 8: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

2011 to PresentEnabling an Always Open Data Center

2012

SUSE Linux Enterprise available on Microsoft Azure.

SUSECON launched in North America.

2014

SUSE joinsMicro Focus.

SUSE Linux Enterprise 12 released.

SUSE Manager released.

2015

SUSE Enterprise Storage based on Ceph launched.

SUSE joins Cloud Foundry.

2016

SUSE CEO joins Micro Focus board.

SUSE acquires openATTIC Storage Management assets.

2011

Novell acquired by Attachmate

SUSE OpenStack Cloud released.

Page 9: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

2011 to PresentFrom Linux Pioneer to Software-defined Infrastructure and Beyond

2017

SUSE acquires OpenStack IaaS and Cloud Foundry PaaS talent and technology assets from HPE.

SUSE celebrates it’s 25th anniversary.

SUSE Cloud Application Platform Certified by Cloud Foundry

SUSE CaaS Platform released.

2018

SUSE Enterprise 15 released.

2019

Partnership with EQT sees SUSE become largest independent open source software company.

Page 10: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

10

What is YaST?

Page 11: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

11

Yet another Setup Tool!

Page 12: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

12

Installing and removing software

Page 13: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

13

Configuring the firewall

Page 14: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

14

Enabling and disabling system services

Page 15: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

15

Windows Domain Membership

Page 16: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

16

Active Directory Users and Computers

Page 17: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

17

ADSI Edit

Page 18: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

18

YaST in the Terminal

Page 19: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

19

Prerequisites to YaST AD tools

Page 20: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

20

Why python?

●Samba python bindings●YaST python bindings

Page 21: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

21

YaST Python Bindings

# Python module declaration Sum.py

from yast import Declare

@Declare('integer', 'integer', 'integer')

def suma(a, b):

return a + b

# Python UI

import yast

yast.import_module('Sum')

yast.import_module('Popup')

sum = yast.Sum.suma(1, 2)

yast.Popup.Message('Sum 1 and 2: %d' % sum)

Page 22: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

22

YaST Python Bindings

Page 23: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

23

For more info

github.com/yast/yast-python-bindings

[email protected]

Page 24: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

24

Samba AD Tools

Page 25: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

25

Outline

● YaST Active Directory Users and Computers● YaST ADSI Edit● Extras

Page 26: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

26

Active Directory Users and Computers

Page 27: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

27

How do I get it?

On openSUSE:

sudo zypper in yast2-aduc

Fedora repos:

https://build.opensuse.org/project/show/home:hellcp:YaST-for-Fedora

or

git clone https://github.com/yast/yast2-aduc.git

git clone https://github.com/yast/yast2-adcommon-python.git

Page 28: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

28

Loading ADUC

Page 29: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

29

User Properties

Page 30: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

30

Create a user

Page 31: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

31

Create a group

Page 32: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

32

Add users to a group

Page 33: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

33

Create a computer object

Page 34: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

34

Searching

Page 35: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

35

Changing Domains

Page 36: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

36

ADSI Edit

Page 37: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

37

How do I get it?

On openSUSE:

sudo zypper in yast2-adsi

Fedora repos:

https://build.opensuse.org/project/show/home:hellcp:YaST-for-Fedora

or

git clone https://github.com/yast/yast2-adsi.git

git clone https://github.com/yast/yast2-adcommon-python.git

Page 38: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

38

ADSI Edit

Page 39: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

39

Hierarchical Treeview

Page 40: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

40

Changing Naming Contexts

Page 41: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

41

Default Naming Context

Page 42: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

42

RootDSE Naming Context

Page 43: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

43

Configuration Naming Context

Page 44: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

44

Schema Naming Context

Page 45: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

45

User Properties

Page 46: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

46

Group Properties

Page 47: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

47

Creating Objects

Page 48: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

48

(Bonus) Provisioning an Active Directory DC

Page 49: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

49

How do I get it?

On openSUSE:

sudo zypper in yast2-samba-provision

Fedora repos:

https://build.opensuse.org/project/show/home:hellcp:YaST-for-Fedora

or

git clone https://github.com/yast/yast-samba-provision.git

Page 50: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

50

Provisioning a Samba ADDC

Page 51: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

51

Future Work

● YaST DNS Manager for Samba AD-DC● Additional Features for YaST ADSI Edit and YaST ADUC

● LDAP query dialog for ADSI Edit

Page 52: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

52

DNS Manager (in progress)

Page 53: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

53

Some takeaways

● samba-tool api?● Empty SambaOptions and CredentialsOptions required to instantiate Command.● Credential to CredentialsOptions to Credential is wasteful.● Parsing the Command object outf seems silly.● Above makes sense for testing, but not interfacing with a GUI.

Page 54: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

54

For more info

github.com/orgs/yast/teams/samba-team

[email protected]

Report bugs to:

bugzilla.opensuse.org

Page 55: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit

55

Questions?

Page 56: Samba Active Directory tools for Windows Admins · Samba Active Directory tools for Windows Admins ADUC and ADSI Edit in Linux (via YaST) ... Microsoft and SUSE announce interoperabilit