Jan 22 – sas – update from pods to bu
NIS domain
Bind account so can participate in Kerberos – establish trust
Asked about certificate server – need turtlecreek for bu.binghamton.edu domain
Buaflocreek going away. Linux doesn’t play well if buafflo is off line
Turtlecreek – 7.33
Furnance creek – ldaps certificate
636 listening on
Ldap adpods? 389,636 – load balancer – there is one for bu domain
Will keep adpods and just change ports
Commands that jeff sent – run as root
Start with backupfiles in jeffs document
Find bkf files. Ownersjip is ok, do not run chown
Edit krb5.conf and replace krb5 in /etc
No changes in windbin
Ldap.conf – need to replace – furnacne.cer in ldap. Get to turtlecreek in ssl port
Openssl s_client -connect turtle.bu.binghamton.edu:636
Copy this certand paste in ldap.conf
Openssl x509 -in turtlecreek.cer -text | more - cert expired
Search certutil -d /etc/openldap certs -L - this returns furnacne
Pdate certutil command to use turtlecreek
No changes nsswitch
Sssd.conf next. Revied changes made earlier. Copied into etc/sssd/sssd.config
Resolv.conf – look in sysconfig/network scripts. Needs bu.binghamton.edu
Order bu.binghamton.edu then cc.binghamton.edu then Binghamton.edu – added this to resolv.conf
Next copied changes in hosts to etc/hosts
Next smb.conf. interfaces not correct change to lo eml.306. updated smb.conf, hich is in samba.conf
Lm hosts in etc – remove buafflocreek. Etc/hosts
No changes sshd
Stop service – systemctl commands. Removed logs from var logs
Samba – rm -rf *
Ran command net ads join -u nist – errors that can be ignored. However need to update samba
Changed crontab -l job
Changed krb5 busas@pods to busas@bu.bing.edu
Klist -e – we are part of domain and we are good
Turned services on