Part 1: Setting up the Hyper-V VM

The network adapter was the tricky part.  I mentioned the fix in this previous post:  http://arkesystems.com/blog/post/2008/04/Hyper-V-Miscellaneous.aspx

Part 2: Installing Debian

1. Start the Debian install (I use mostly all the default settings)
2. When it asks for you to create a user DO NOT use the same username as your AD account, this will just be confusing.  Use something else, or something like 'defaultdebianuser'.
3. When it asks for software selection choose the following:
   • Desktop Environment
   • Web Server
   • SQL Database
   • Standard System
4. Now wait forever while it finishes the initial install.
5. Finish up the install and reboot
6. Login as root
7. Setup your network settings:
   • #> sudo nano -w /etc/network/interfaces
   • Create a static entry such as:

     allow-hotplug eth0
     iface eth0 inet static
     address 192.168.1.57
     netmask 255.255.255.0
     gateway 192.168.1.254

     auto eth0

   • Save and exit
   • Restart the machine and re-login
8. install the ssh server #> apt-get install ssh
9. You can now ssh into the machine so you don't have to be on the actual box in order to finish setting subversion up.

Part 3: Connecting to the Active Domain

We have our base install of Debian now, and it's available via ssh.  We now need to install the necessary components for connecting to the Windows Domain.

1. Modify the sources list accordingly
   • #> sudo nano -w /etc/apt/sources.list

     deb http://ftp.us.debian.org/debian/ etch main contrib non-free
     deb-src http://ftp.us.debian.org/debian/ etch main contrib non-free

     deb http://security.debian.org/ etch/updates main contrib
     deb-src http://security.debian.org/ etch/updates main contrib

      

2. #> sudo apt-get update
3. #> sudo apt-get install libkrb43
4. #> sudo apt-get install krb5-config
   • It may ask you to enter the IP address of your AD server
5. #> sudo apt-get install samba
6. #> sudo apt-get install winbind
7. #> sudo apt-get install ntpdate
8. #> sudo apt-get install ntp-server
9. The previous items may ask for some configuration options, you can fill them in if you know them otherwise we'll be modifying the configuration files later...
10. #> sudo /etc/init.d/samba stop
11. #> sudo /etc/init.d/winbind stop
12. #> sudo /etc/init.d/ntp stop
13. #> sudo nano -w /etc/krb5.conf
    • Under the [realms] section add your AD controller's IP

      REALMNAME {
      kdc= 192.168.1.XXX

      }

    • Look for the default_realm parameter and set it equal to your domain name.  The domain name MUST BE IN ALL CAPS.  For example, ARKESYSTEMS not arkesystems or arkesystems.com
    • Save and Exit
14. #> sudo ntpdate <ip of the time or AD server>
15. #> sudo nano -w /etc/ntp.conf
    • Add a server like:
      • server <ip of the time or AD server>
    • Save and exit
16. #> sudo /etc/init.d/ntp start
17. check to see if this is working so far by:
    • #> ntpq -p
    • If it has your server in the list you good to keep going.
18. #> sudo nano -w /etc/samba/smb.conf

    realm = ARKESYSTEMS.COM
    workgroup = ARKESYSTEMS
    security = ads
    idmap uid = 10000-20000
    idmap gid = 10000-20000
    template shell = /bin/bash
    template homedir = /home/%D/%U
    winbind use default domain = yes

    • Save and quit
19. #> sudo nano -w /etc/nsswitch.conf
    • Add the winbind flag to the passwd and group field:

      passwd: files winbind
      group: files winbind

       

20. #> sudo ldconfig
21. What we've done in the last few steps is synced the debian box with the time server.  They both need to be within a few seconds of each other in order to properly authenticate on the domain.  We then setup our user folders and samba authentication.  Finally we added the ability of Debian to validate against the AD for users.  We're now ready to attempt to join this machine to the domain.
22. #> sudo net ads join -U "DOMAINADMIN"
23. #> sudo /etc/init.d/samba start
24. #> sudo /etc/init.d/winbind start
25. use the getent passwd and getent group commands to check to see if they're listing the users and groups from your domain.  If they are not, double check your config files.
26. Next we're going to configure PAM (Pluggable Authentication Module Subsystem)  This allows programs in the Linux environment to authenticate through the domain. We've got to update three configuration files to use the winbind extensions

    # sudo nano -w /etc/pam.d/common-account
    account sufficient pam_winbind.so
    account required pam_unix.so

    # sudo nano -w /etc/pam.d/common-auth
    auth sufficient pam_winbind.so
    auth required pam_unix.so use_first_pass

    # sudo /etc/pam.d/common-session

    session required pam_mkhomedir.so skel=/etc/skel/ umask=0022
    session sufficient pam_winbind.so
    session required pam_unix.so

27. Now we need to edit our skeleton files for users who logon to debian for the first time.
    • #> cd /etc/skel
    • #> sudo mkdir .ssh
    • #> sudo nano -w .ssh/authorized_keys
    • Save and Exit
    • #> sudo chmod -R 744 .ssh
    • #> sudo nano -w .bashrc
    • add the line: umask 007 at the bottom, save and exit
    • #> sudo nano -w .bash_profile
    • change the umask to 007, save and exit

Part 4: Installing and Configuring Subversion

1. #> sudo apt-get install subversion
2. **THE FOLLOWING IS ONLY IF YOU WANT WEB ACCESS**
3. #> sudo apt-get install apache2
4. #> sudo a2enmod dav_fs
5. #> sudo /etc/init.d/apache2 force-reload
6.