[KB7849] Configure domain connection for ESET PROTECT Virtual Appliance

Issue

• You want to connect the ESET PROTECT Virtual Appliance (VA) to an existing domain in Active Directory

Solution

1. Initial configuration of ESET PROTECT Virtual Appliance
2. Using ESET PROTECT VA Management console
3. Using the Webmin management interface

I. Initial configuration of ESET PROTECT Virtual Appliance

While configuring a new Virtual Appliance (VA), the following settings are mandatory to use ESET PROTECT VA on a domain:

• Windows workgroup: A workgroup or NETBIOS domain name for this server.
• Windows domain: A domain for this server.
• Windows domain controller: A domain controller for this server. Type the ESET PROTECT Server fully qualified domain name (FQDN).
• Windows domain administrator: An account used to join the domain.
• Windows Domain administrator password: An administrator password used to join the domain.
• DNS1: A domain name server for this virtual machine. Type the IP address of the domain controller.
  
  

  

II. Using ESET PROTECT VA Management console

After you set up your ESET PROTECT Virtual Appliance, continue with the following steps:

1. Open the ESET PROTECT VA Management Console, press Enter, type the password and press Enter → Enter.

   

2. Select Configure domain.

   

3. You will be guided through four configuration files. Press Enter to edit each configuration file, then press CTRL+X to close the text editor. Press Y to save changes (or N to discard changes).

   1. /etc/hosts

      The hosts file maps hostnames and IP addresses. Add a line to map the IP address and hostname of your domain server, for example:

      10.20.30.40 w16dc.mydomain.net

   2. /etc/ntp.conf

      Configure the VA to synchronize its time against the domain controller. Add the following line at the end of the configuration file:

      server w16dc.mydomain.net true

   3. /etc/krb5.conf

      Configure Kerberos - fill in your domain name and domain controller, for example:

      default_realm=MYDOMAIN.NET
      MYDOMAIN.NET = {
                kdc = w16dc.mydomain.net
      }
      .mydomain.net = MYDOMAIN.NET

   4. /etc/samba/smb.conf

      In Samba configuration, ensure that the correct workgroup and realm are set, for example:

      workgroup = MYDOMAIN
      realm = mydomain.net

4. Domain connection is now configured. Select Rejoin domain in the ESET PROTECT VA menu to initiate domain join. Type the administrator name and password for the domain connection. You may also need to restart the ESET PROTECT VA.

   

III. Using the Webmin management interface

After you set up your ESET PROTECT Virtual Appliance and configured the domain, continue with the following steps:

1. Open the ESET PROTECT VA Management Console. Press Enter, type the password, then press Enter → Enter.

   

2. Select Enable/Disable remote access to enable Webmin on port 10000.

   

3. Open your internet browser and log in to the Webmin Management interface of the ESET PROTECT VA.

   

4. Set the domain controller and DNS server. Click Networking → Network Configuration → Host Addresses.

   

5. Click Add a new host address.

   

6. Type the IP Address (10.20.30.40) and Hostname (w16dc.mydomain.net) of the domain controller, and click Create.

   

7. Click Network configuration → Hostname and DNS Client.

   

8. In DNS servers, type the IP address of the domain server (10.20.30.40). Click Save.

   

9. Configure time synchronization with the domain controller:

   • Click Hardware → System Time → Time server sync
   • In Timeserver hostnames or addresses, type the domain controller hostname (w16dc.mydomain.net)
   • Click Sync and Apply
   
   

   

10. Configure the domain connection details:

    • Click Networking → Kerberos5
    • Type:
      • Realm: MYDOMAIN.NET
      • Domain name: .mydomain.net (type a period at the beginning)
      • KDC: w16dc.mydomain.net
    • In the Use DNS to lookup KDC field, select Yes
    • Click Update Configuration
    
    

    

11. In the ESET PROTECT VA Management Console menu, select Rejoin domain to initiate domain join. Type the administrator name and password for the domain connection. You may also need to restart the ESET PROTECT VA.