https://store-images.s-microsoft.com/image/apps.10665.507cdbf8-0f33-402f-a4d2-c39f82837c50.500f233e-4958-4c78-97d7-63e9aaff753e.87ef4570-93c9-4b20-8d4b-2190b92293ca

Domain Controller

por bCloud LLC

Version 4.19.5 + Free Support on Ubuntu 24.04

Samba Active Directory Domain Controller

Samba Active Directory Domain Controller (AD DC) is an open-source implementation of a Windows-compatible domain controller on Linux, providing centralized authentication, authorization, and identity management for users, groups, and computers. It enables organizations to securely manage access policies, enforce security controls, and integrate Linux systems with Windows networks, all via command-line interfaces without relying on graphical tools.

Features of Samba AD DC:

  • Centralized authentication and identity management using Kerberos and LDAP.
  • Strong security with password policies, access control, and auditing capabilities.
  • Monitoring support via logs and samba-tool commands for replication and domain health.
  • Supports integration with Linux, Windows, and web applications for authentication.
  • Scalable and robust, with support for multi-domain and multi-site environments.
  • Flexible DNS management for internal domain resolution.
  • It includes the latest versions of Apache, PHP, and SQL, i.e., Apache 2.4.5, PHP 8.3.5, and MySQL 8.0.4 (or MariaDB equivalent).

Samba AD DC Usage

$ sudo su
$ samba --version            # Check Samba version
$ systemctl status samba-ad-dc      # Check service status
$ samba-tool domain level show      # Check domain and forest functional levels
$ kinit administrator@EXAMPLE.COM   # Obtain Kerberos ticket
$ klist                             # Verify Kerberos credentials
$ host -t SRV _ldap._tcp.EXAMPLE.COM  # Test DNS SRV records
    

Disclaimer: Samba AD DC is an independent open-source project developed and maintained by the Samba community. It is not affiliated with, endorsed by, or sponsored by Microsoft or other commercial directory vendors. Samba AD DC is provided "as is," without warranties of any kind. Users are responsible for secure configuration, compliance with licensing terms, and adherence to applicable data protection regulations when deploying it in production.