setenforce 0
systemctl disable firewalld
systemctl stop firewalld

yum install epel-release -y
yum install mc nano wget htop -y
yum groups -y install "Development Tools"
yum -y install iniparser libldb libtalloc libtdb libtevent python-devel gnutls-devel libacl-devel openldap-devel pam-devel readline-devel krb5-devel cups-devel lmdb lmdb-devel jansson-devel gpgme-devel libarchive-devel krb5-workstation

curl -O https://download.samba.org/pub/samba/stable/samba-4.9.5.tar.gz
tar zxvf samba-4.9.5.tar.gz 
cd samba-4.9.5 

./configure \
--prefix=/usr \
--localstatedir=/var \
--with-configdir=/etc/samba \
--libdir=/usr/lib64 \
--with-modulesdir=/usr/lib64/samba \
--with-pammodulesdir=/lib64/security \
--with-lockdir=/var/lib/samba \
--with-logfilebase=/var/log/samba \
--with-piddir=/run/samba \
--with-privatedir=/etc/samba \
--enable-cups \
--with-acl-support \
--with-ads \
--with-automount \
--enable-fhs \
--with-pam \
--with-quotas \
--with-shared-modules=idmap_rid,idmap_ad,idmap_hash,idmap_adex \
--with-syslog \
--with-utmp \
--with-dnsupdate \
--enable-selftest --with-ads --with-systemd --with-winbind

make 
make install

mv /etc/samba/smb.conf /etc/samba/smb.conf.bak
mv /etc/krb5.conf /etc/krb5.conf.bak

samba-tool domain provision --use-rfc2307 --interactive

[Unit]
Description=Samba AD Daemon
Wants=network-online.target
After=network.target network-online.target rsyslog.service

[Service]
Type=forking
PIDFile=/run/samba/samba.pid
LimitNOFILE=16384
ExecStart=/usr/sbin/samba --daemon
ExecReload=/bin/kill -HUP $MAINPID

[Install]
WantedBy=multi-user.target

cp /etc/samba/krb5.conf /etc/
nmcli connection modify eth0 ipv4.dns 127.0.0.1 
nmcli connection down eth0; nmcli connection up eth0

systemctl enable samba
systemctl start samba

# show domain level
[root@smb ~]# samba-tool domain level show 
Domain and forest function level for domain 'DC=srv,DC=world'

Forest function level: (Windows) 2008 R2
Domain function level: (Windows) 2008 R2
Lowest function level of a DC: (Windows) 2008 R2

# add a domain user
[root@smb ~]# samba-tool user create cent 
New Password:   # set password
Retype Password:
User 'cent' created successfully

[libdefaults]
    dns_lookup_realm = false
    dns_lookup_kdc = true
    default_realm = AUGIN.RU

kinit administrator

klist

samba-tool domain join augin.ru DC -U"AUGIN\administrator" --dns-backend=SAMBA_INTERNAL