Repository navigation
201Network
| 01- Network | 02- RodcServer | 03- Settings | |
|---|---|---|---|
| 05- Software | 06- UsersShare | ||
| 10- GnomeShell | 11- TroubleShoots | 12- Selinux |
The RodcServer is a TemplateVM clone. See installation TemplateVM.
Selinux must be and will always be "permissive".
vi /etc/crontab
@reboot root setenforce 0
Important.
You need a Windows 11 Pro computer to administer FileServer.
This computer must be integrated into the domain.
For this example.
The RODC server is not located on the same network as the domain controllers.
Name FileServer: aoles.dw.learn.lan
Ip AD server: 192.168.60.49/24
gateway: 192.168.60.254
Domain name: dw.learn.lan
vi /etc/hosts
127.0.0.1 localhost
127.0.0.1 aoles.dw.learn.lan aoles
192.168.60.49 aoles.dw.learn.lan aoles
vi /etc/hostname
aoles.dw.learn.lan
vi /etc/sysconfig/network
# Created by anaconda
networking=yes
HOSTNAME=aoles.dw.learn.lan
Change Network.
Example:
IP: 192.168.60.49/24
Gateway: 192.168.60.254
Domain Name Server: 192.168.40.47 192.168.40.48
Search domain: dw.learn.lan
nmcli con mod eth0 ipv4.method "manual" ipv4.addresses 192.168.60.49/24
nmcli con mod eth0 ipv4.gateway 192.168.60.254
nmcli con mod eth0 ipv4.dns 192.168.40.47,192.168.40.48
nmcli con mod eth0 ipv4.dns-search dw.learn.lan
Read the new network configuration.
more /etc/NetworkManager/system-connections/eth0.nmconnection
Apply the new network configuration.
ifconfig eth0 0.0.0.0
systemctl restart NetworkManager
ifconfig eth0
Restart the server.
reboot
Update.
RedHat may ask you to make a new subscription.
subscription-manager register --username <username> --password <password> --auto-attach --force
dnf update
Restart the server.
reboot
Add rules for firewall.
vi /etc/ufw/applications.d/ufw-custom
[RODCSERVER]
title=RODCSERVER
description=Firewall access rodcserver
ports=88,135,139,389,445,464,636,3268,3269,50000:50500/tcp|88,139,389,445,464/udp
[MS-RPC]
title=MS-RPC
description=protocole microsoft
ports=49152:65535/tcp
ufw reload
ufw allow IN RODCSERVER
ufw allow OUT RODCSERVER
Find your users network.
Example: 192.168.80.0/24
ufw allow out from 192.168.60.49 to 192.168.80.0/24 app MS-RPC
Disable Avahi-Daemon (mDNS / Hello protocol).
systemctl stop avahi-daemon.service avahi-daemon.socket
systemctl disable avahi-daemon.service avahi-daemon.socket
After restarting, configuring the language of the system in English to facilitate the search for problems in the logs.
dnf install glibc-langpack-en
localectl set-locale LANG=en_US.utf8
localectl status
Check the useful packages to install.
dnf install epel-release wget sudo screen nmap telnet tcpdump rsync net-tools bind-utils htop