This article explains how to install a Samba v4 Active Directory domain controller in a Docker container. This post is part of my series on home automation, networking & self-hosting that shows how to install, configure, and run a home server with dockerized or virtualized services.

Nowadays, identity management is everywhere and is no longer reserved for a technical audience, FusionDirectory was born from this need to make everyday identity management easy.

FusionDIrectory allows you to simplify and harmonize your identity management while focusing on security.

Microsofts bekannten Verzeichnisdienst Active Directory gibt es inzwischen auch in der Cloud des Herstellers. Golem.de zeigt, wie er dort funktioniert.

Unternehmen haben viele Gründe, auf zentrale Verzeichnisdienste für die Verwaltung ihrer Dienste und Benutzer zu setzen. Besonders die Verwaltung von Benutzerzugängen spielt dabei eine herausragende Rolle: Es ist im Jahr 2021 nicht mehr zeitgemäß oder sinnvoll, jedes System als Insel mit eigenen Benutzerzugängen zu betrachten.

Samba backups provide a way to recover your Samba AD domain, in the unlikely event that it suffers a catastrophic failure. It does not backup individual DCs.

ldapvi is an interactive LDAP client for Unix terminals. Using it, you can update LDAP entries with a text editor.

Because The join domain account is often visible in your deployment answer file (unattend.xml of sysprep.inf) during the WinPE phase, it is important that this specific account does not have any more permission, than the bare minimum.. I often experience that a domain admin account is used for this job, which is a huge security breach. When i ask why this is, the answer is normally “ we can not find the information on how to create an account with only join domain rights”.

If you’re a Unix person instead of e.g. a Microsoft® Windows® person, you’ve probably been annoyed by Iceweasel (or Mozilla™ Firefox®) creating a ~/Desktop directory, among others (things like ~/Downloads).

Here’s a quick fix I found somewhere in the ’net:

The holy grail: Single Signon RT with Windows Server, Active Directory and Apache 1.3 on unix