Ответы пользователя chifth

Как настроить работу dnsmasq в роли DHCP-сервера в сети с контроллером домена?

chifth @chifth

Возможно, кому-то пригодится. Мой конфиг dnsmasq.conf для следующей архитектуры:
Gateway - роутер на OpenWRT (DNS, DHCP)
SE-DC - ПК на Windows Server 2019 (контролер домена БЕЗ служб DNS-сервер, DHCP-сервер)
Домен - dc.domain.com (в даном примере).
Подредактируйте имя ПК в конфиге под свой домен. Особенно там где его GUID используется.
Конфиг писал с помощью гугла. Буду благодарен если кто-то знающий исправит\дополнит\объяснитю

Конфиг /etc/dnsmasq.conf

# Change the following lines if you want dnsmasq to serve SRV
# records.
# You may add multiple srv-host lines.
# The fields are <name>,<target>,<port>,<priority>,<weight>

#Domain
domain=dc.domain.com

#Time Update Server
#address=/time.windows.com/192.168.123.2

#For Win7 and later 
#dhcp-option-252,"\n"

#Banned Hosts
#addn-hosts=/etc/banned_hosts

# IF AD DNS be also Used (transfer requests from zone to ip)
#server=/dc.domain.com/192.168.123.2

#Locan domain name if WIN-disabled
local=/dc.domain.com/

#DNS Servers List
server=/123.168.192.in-addr.arpa/192.168.123.1
#server=/192.168.123.in-addr.arpa/192.168.123.2

#---------------------------------------------------------------
# REGISTER CNAME TXT
#---------------------------------------------------------------

#For this type of registration you need in 
# file /etc/hosts something like this:
# 192.168.123.15 troll.dc.domain.com troll 
# and then here write:
# cname=ALIAS,REAL_NAME

#cname=controller.dc.domain.com,SE-dc.dc.domain.com
#cname=rdp.dc.domain.com,SE-rdp.dc.domain.com
#cname=fileserver.dc.domain.com,SE-fs.dc.domain.com
#cname=mail.dc.domain.com,SE-mail.dc.domain.com
#cname=fs.dc.domain.com,SE-FS.dc.domain.com
cname=dc.dc.domain.com,SE-DC.dc.domain.com

#-------------------------------------
# MX RECORDS
#-------------------------------------

#Return MX mail.dc.hist to PC named SE-mail.dc.hist with priority 10
#mx-host=dc.domain.com,mail.dc.domain.com,10

#Default MX with localmx option
#mx-target=mail.dc.domain.com

#Return MX, which pointed to mx-destination for ALL local PCs
#localmx

#---------------------------------------
# TXT RECORDS
#---------------------------------------

#TXT records. Also we can write SPF here
txt-record=dc.domain.com,"v=spf1 a -all"
txt-record=dc.domain.com,"Wellcome to The Dark Side"

#=============================================================

#Range of IP Addresses for servers, etc,
#dhcp-range=192.168.123.10,192.168.123.30,24h

#MAXimum DHCP-Leases. Default 150
#dhcp-lease-max=222

#IPv6 Range
#dhcp-range=1234::, ra-only

#RANGE OPTIONS

#dhcp-option=1,255.255.255.0 #NETMASK
#dhcp-option=3,192.168.123.1 #GATEWAY
#dhcp-option=6,192.168.123.1 #DNS Servers
#dhcp-option=15,dc.domain.com #DNS Domain name
#dhcp-option=19,1 #option IP-forwarding ON
#dhcp-option=28,192.168.123.255 #BROADCAST
#dhcp-option=42,192.168.123.1 #NTP time server

#dhcp-option=40,DC #NIS Domain name
#dhco-option=41,192.168.123.2 #NIS Server
#dhcp-option=44,192.168.123.2 #WINS
#dhco-option=45,192.168.123.2 #NetBIOS Server
#dhcp-option=73,192.168.123.2 #Finger Server
#dhcp-option=46,8 #NetBIOS Node
#dhcp-authoritative #IF THIS DHCP IS ONLY ONE IN Network

#------------------------------------
# LOGGING   tail -f /var/log/syslog o journalctl -f
#------------------------------------

#log-queries

#-------------------------------------------------
# REGISTER A and SRV for Active Directory
#-------------------------------------------------

#-------------------------------------------------
# Windows AD | _msdcs.dc.domain.com | Zone
#-------------------------------------------------

#-->root
cname=430732cb-e159-4333-87d1-6cea750f5b25._msdcs.dc.domain.com,SE-DC.dc.domain.com
#-->root\dc
	#-->root\dc\sites
		#-->root\dc\sites\Default-First-Site-Name
			#-->root\dc\sites\Default-First-Site-Name\tcp
			srv-host=_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.dc.domain.com,SE-DC.dc.domain.com,88,0,100
			srv-host=_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.dc.domain.com,SE-DC.dc.domain.com,389,0,100
	#-->root\dc\tcp
	srv-host=_kerberos._tcp.dc._msdcs.dc.domain.com,SE-DC.dc.domain.com,88,0,100
	srv-host=_ldap._tcp.dc._msdcs.dc.domain.com,SE-DC.dc.domain.com,389,0,100
#-->root\domains
	#-->root\domains\27b71e15-e809-4875-aa12-cd7575e3f3ab
		#-->root\domains\27b71e15-e809-4875-aa12-cd7575e3f3ab\tcp
		srv-host=_ldap._tcp.27b71e15-e809-4875-aa12-cd7575e3f3ab.domains._msdcs.dc.domain.com,SE-DC.dc.domain.com,389,0,100
#-->root\gc
address=/gc._msdcs.dc.domain.com/192.168.123.2
	#-->root\gc\sites
		#-->root\gc\sites\Default-First-Site-Name
			#-->root\gc\sites\Default-First-Site-Name\tcp
			srv-host=_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.dc.domain.com,SE-DC.dc.domain.com,3268,0,100
	#-->root\gc\tcp
	srv-host=_ldap._tcp.gc._msdcs.dc.domain.com,SE-DC.dc.domain.com,3268,0,100
#-->root\pdc
	#-->root\gc\tcp
	srv-host=_ldap._tcp.pdc._msdcs.dc.domain.com,SE-DC.dc.domain.com,389,0,100

#-------------------------------------------------
# Windows AD | dc.domain.com | Zone
#-------------------------------------------------

#-->root
	#-->root\sites
		#-->root\sites\Default-First-Site-Name
			#-->root\sites\Default-First-Site-Name\tcp
			srv-host=_gc._tcp.Default-First-Site-Name._sites.dc.domain.com,SE-DC.dc.domain.com,3268,0,100
			srv-host=_kerberos._tcp.Default-First-Site-Name._sites.dc.domain.com,SE-DC.dc.domain.com,88,0,100
			srv-host=_ldap._tcp.Default-First-Site-Name._sites.dc.domain.com,SE-DC.dc.domain.com,389,0,100
	#-->root\tcp
	srv-host=_gc._tcp.dc.domain.com,SE-DC.dc.domain.com,3268,0,100
	srv-host=_kerberos._tcp.dc.domain.com,SE-DC.dc.domain.com,88,0,100
	srv-host=_kpasswd._tcp.dc.domain.com,SE-DC.dc.domain.com,464,0,100
	srv-host=_ldap._tcp.dc.domain.com,SE-DC.dc.domain.com,389,0,100
	#-->root\udp
	srv-host=_kerberos._udp.dc.domain.com,SE-DC.dc.domain.com,88,0,100
	srv-host=_kpasswd._udp.dc.domain.com,SE-DC.dc.domain.com,464,0,100
	#-->root\DomainDnsZones
	address=/DomainDnsZones.dc.domain.com/192.168.123.2
	#-->root\DomainDnsZones\sites
		#-->root\DomainDnsZones\sites\Default-First-Site-Name
			#-->root\DomainDnsZones\sites\Default-First-Site-Name\tcp
			srv-host=_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.dc.domain.com,SE-DC.dc.domain.com,389,0,100
	#-->root\DomainDnsZones\tcp
	srv-host=_ldap._tcp.DomainDnsZones.dc.domain.com,SE-DC.dc.domain.com,389,0,100
	#-->root\ForestDnsZones
	address=/ForestDnsZones.dc.domain.com/192.168.123.2
	#-->root\ForestDnsZones\sites
		#-->root\ForestDnsZones\sites\Default-First-Site-Name
			#-->root\DomainDnsZones\sites\Default-First-Site-Name\tcp
			srv-host=_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.dc.domain.com,SE-DC.dc.domain.com,389,0,100
	#-->root\ForestDnsZones\tcp
	srv-host=_ldap._tcp.ForestDnsZones.dc.domain.com,SE-DC.dc.domain.com,389,0,100

Ответ написан более года назад

Комментировать

GPO. Как убрать значок поиска и оставшиеся плитки из меню "Пуск" Windows Server 2012R2?

chifth @chifth

Редачить реестр через групповые политики пробовали?

Я так настраивал панель задач

Войдите на сайт