I will setup samba active directory domain controller on linux
Linux Certified, AWS Architect, Enterprise IT Specialist
About this Gig
Looking to replace expensive Windows Server CAL licenses with a solid Active Directory solution on Linux?
I will deploy, optimize, and secure an enterprise-grade Samba 4 Active Directory Domain Controller tailored for high-concurrency production environments (supporting up to 500+ users).
What I will do for your infrastructure:
- Full Samba AD DC deployment with DNS, Kerberos, and SYSVOL
- LDAPS setup (Port 636) using custom or public SSL/TLS certificates
- Linux kernel tuning (sysctl, file descriptors) for zero authentication lag
- Secure WireGuard/IPsec VPN integration for remote staff and WAN users
- Hardening with UFW Firewall, Chrony NTP signing, and Fail2ban
- Automated daily online AD database backup scripts
- Windows 10/11 domain joining and RSAT setup guidance
Why work with me?
- Production-tested configurations built for high uptime and stability
- Clean handover with clear operational notes for your internal team
Please message me with your network setup before placing an order so we can select the right deployment plan for your environment.
Operating system:
Linux/Unix
My Portfolio
Other Support & IT Services I Offer
FAQ
Do I need a Windows Server license for this?
No, that's the whole point - Samba lets you run Active Directory-style domain services on Linux, so you get centralized authentication, DNS, and Group Policy support without paying for Windows Server or CALs.
What Linux distro do you use for this?
I typically work with Ubuntu Server or Debian, but I can also do this on CentOS/Rocky Linux if that's what your infrastructure already uses. Just let me know before ordering.
Will this work with my existing Windows clients?
Yes, Windows machines can join the domain the same way they would with a real Windows Server AD - login, group policies, and shared resources all work as expected.
Do you provide remote access setup, or do I need to give you server access?
I'll need SSH access to your server (or a fresh VPS) to do the setup. If you don't have a server yet, I can also guide you on what to provision.
Can this handle a larger office or remote team?
Yes - the Premium package is built for that, including WireGuard VPN for remote staff and tuning for 500+ users.
How do remote users connect from outside the local network?
Remote users connect securely using a WireGuard or IPsec VPN tunnel. This provides full access to domain authentication and network shares without exposing sensitive AD ports directly to the public internet.
Can Samba AD DC replace Microsoft Windows Server Active Directory?
Yes, Samba 4 acts as a full drop-in replacement for Windows Server AD. It supports native Kerberos authentication, Group Policy Objects (GPO), DNS, and RSAT (Remote Server Administration Tools) on Windows.

