This course provides the knowledge and practical skills needed to deploy, administer, secure, and troubleshoot an Active Directory environment using open-source technologies. It focuses on Samba Active Directory Domain Controllers, Linux integration, centralized identity management, authentication, and domain-based resource access.
Participants learn to manage directory objects, configure supporting DNS and Kerberos services, integrate Windows and Linux clients, administer permissions, and maintain service availability. The course concludes with a capstone that brings these skills together in a representative organizational environment.
Duration 5 Days – 35 hrs.
Objectives
- Explain Active Directory concepts and the role of Samba in an open-source directory environment.
- Prepare Linux servers for Samba Active Directory deployment.
- Provision and configure a Samba Active Directory Domain Controller.
- Administer users, groups, organizational units, and computer accounts.
- Configure and troubleshoot DNS, Kerberos, and time synchronization.
- Join Windows and Linux systems to the domain.
- Manage domain-based file access and permissions on a Samba member server.
- Apply supported Group Policy settings and administrative delegation.
- Implement security controls, backup procedures, and recovery practices.
- Diagnose common authentication, connectivity, and replication issues.
Target Audience
- Linux and Windows system administrators.
- Network administrators and infrastructure engineers.
- IT support personnel responsible for user accounts and access management.
- Technical professionals managing mixed Windows and Linux environments.
- IT professionals implementing open-source directory services.
Prerequisites
- Basic Linux administration skills, including command-line operations, file permissions, and service management.
- Familiarity with Windows workstation administration.
- Understanding of TCP/IP networking, IP addressing, DNS, and hostnames.
- Basic knowledge of users, groups, authentication, and access permissions.
- Familiarity with virtual machines or access to a suitable virtual lab environment.
Course Outline
Day 1: Directory Fundamentals and Server Preparation
Module 1: Introduction to Open-Source Active Directory Administration
- Active Directory purpose and architecture.
- Domains, forests, organizational units, and directory objects.
- Samba domain controller and member server roles.
- LDAP, Kerberos, DNS, and SMB fundamentals.
- Open-source integration with Microsoft Active Directory.
- Compatibility considerations and deployment limitations.
Module 2: Planning and Preparing the Environment
- Domain naming and DNS namespace planning.
- Server sizing and network requirements.
- Linux installation and package preparation.
- Static IP addressing, hostnames, and name resolution.
- Time synchronization requirements.
- Lab topology and administrative access preparation.
Day 2: Domain Controller Deployment and Directory Administration
Module 3: Deploying a Samba Active Directory Domain Controller
- Installing Samba and supporting utilities.
- Provisioning a new domain and Kerberos realm.
- Configuring DNS and service startup.
- Understanding Samba configuration and directory locations.
- Verifying DNS records, Kerberos authentication, and domain services.
- Initial deployment troubleshooting.
Module 4: Managing Directory Objects
- Using samba-tool for routine administration.
- Creating and maintaining user accounts.
- Managing security groups and memberships.
- Organizing objects with organizational units.
- Managing computer accounts.
- Configuring password policies and account restrictions.
- Using compatible Windows Remote Server Administration Tools.
Day 3: Client Integration and Resource Access
Module 5: Integrating Windows and Linux Clients
- Preparing clients for domain membership.
- Joining Windows workstations to the domain.
- Integrating Linux clients using realmd and SSSD.
- Understanding Winbind-based integration.
- Configuring identity resolution and domain logins.
- Managing home directory creation and login access.
- Troubleshooting domain joins and authentication.
Module 6: Administering Domain-Based File Services
- Preparing a dedicated Samba domain member server.
- Configuring domain membership and identity mapping.
- Creating SMB shares.
- Managing Linux permissions and Windows access control lists.
- Assigning access through domain security groups.
- Validating access from Windows and Linux clients.
- Resolving common file access and permission issues.
Day 4: Policy, Security, and Operational Maintenance
Module 7: Group Policy and Administrative Delegation
- Group Policy concepts and management tools.
- Creating and linking Group Policy Objects.
- Applying supported Windows client settings.
- Understanding SYSVOL and policy distribution.
- Group Policy scope, inheritance, and filtering.
- Delegating routine directory administration.
- Troubleshooting policy application.
Module 8: Securing and Maintaining the Environment
- Applying least-privilege administrative practices.
- Separating privileged and routine user accounts.
- Configuring firewall access for required services.
- Securing LDAP communications and managing certificates.
- Reviewing authentication and administrative logs.
- Planning updates and configuration changes.
- Automating routine tasks with shell scripts and Samba utilities.
Day 5: Availability, Recovery, and Capstone
Module 9: Replication, Backup, Recovery, and Troubleshooting
- Adding an additional Samba domain controller.
- Understanding directory replication and FSMO roles.
- Checking replication health and DNS consistency.
- Understanding SYSVOL replication considerations.
- Creating and protecting domain backups.
- Planning and practicing domain recovery in an isolated environment.
- Diagnosing DNS, Kerberos, time synchronization, and directory issues.
- Preparing operational documentation and recovery procedures.
Module 10: Capstone — Deploying an Open-Source Directory Environment
- Deploy a Samba Active Directory domain for a sample organization.
- Create departmental organizational units, users, and security groups.
- Join Windows and Linux clients to the domain.
- Configure a separate member server for departmental file shares.
- Apply group-based permissions and supported client policies.
- Configure an additional domain controller and check replication.
- Establish a backup procedure and document recovery steps.
- Resolve a representative authentication or resource access issue.
- Produce a concise administration and maintenance guide.

