Непонятки в настройке Samba как Контроллер домена

[jonik908]

Все доброго времени суток!
Прошу объяснить логику настройки DNS на сервере. Не пойму как прописать настройки сети на сервере для работы Контроллера домена. Проще говоря куда писать имена...

Код: [Выделить]

hostname ubuntu/etc/network/interfaces

Код: [Выделить]

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto enp0s3
iface enp0s3 inet static
address 192.168.1.190
netmask 255.255.255.0
gateway 192.168.1.1
dns-search ubuntu.ungk.test
dns-nameservers 192.168.1.1/etc/hosts

Код: [Выделить]

127.0.0.1       localhost
127.0.1.1       ununtu.ungk.test ubuntu

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters/etc/samba/smb.conf

Код: [Выделить]

# Global parameters
[global]
        workgroup = UBUNTU01
        realm = UNGK.TEST
        netbios name = UBUNTU
        server role = active directory domain controller
        dns forwarder = 192.168.1.1
        idmap_ldb:use rfc2307 = yes

[netlogon]
        path = /var/lib/samba/sysvol/ubuntu.ungk.test/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No
/etc/krb5.conf

Код: [Выделить]

[libdefaults]
        default_realm = UNGK.TEST

# The following krb5.conf variables are only for MIT Kerberos.
        krb4_config = /etc/krb.conf
        krb4_realms = /etc/krb.realms
        kdc_timesync = 1
        ccache_type = 4
        forwardable = true
        proxiable = true

# The following encryption type specification will be used by MIT Kerberos
# if uncommented.  In general, the defaults in the MIT Kerberos code are
# correct and overriding these specifications only serves to disable new
# encryption types as they are added, creating interoperability problems.
#
# Thie only time when you might need to uncomment these lines and change
# the enctypes is if you have local software that will break on ticket
# caches containing ticket encryption types it doesn't know about (such as
# old versions of Sun Java).

#       default_tgs_enctypes = des3-hmac-sha1
#       default_tkt_enctypes = des3-hmac-sha1
#       permitted_enctypes = des3-hmac-sha1

# The following libdefaults parameters are only for Heimdal Kerberos.
        v4_instance_resolve = false
        v4_name_convert = {
                host = {
                        rcmd = host
                        ftp = ftp
                }
                plain = {
                        something = something-else
                }
        }
        fcc-mit-ticketflags = true

[realms]
        UNGK.TEST = {
                kdc = ubuntu.ungk.test
                admin_server = ubuntu.ungk.test
        }



 

[AnrDaemon]

В hosts адрес ununtu.ungk.test должен разрешаться в IP машины, а не в локальную петлю.
Либо уберите его оттуда вообще, пусть в DNS ищет.