invisAD-setup

### InvisAD Server Setup for GreenLeaf Consulting

**System Configuration:**
- Server: openSUSE Leap 15.5
- Hostname: ad-server.greenleaf.local
- Domain: greenleaf.local
- IP Address: 192.168.1.10

**Step 1: Install Required Packages**
```bash
sudo zypper refresh
sudo zypper install -y samba samba-client samba-winbind samba-ad-dc krb5-client openldap2-client ntp
```

**Step 2: Configure Active Directory Integration**
```bash
sudo samba-tool domain provision --use-rfc2307 --interactive \
  --domain=GREENLEAF \
  --realm=GREENLEAF.LOCAL \
  --adminpass=SecureAdminPass123! \
  --server-role=dc
```

**Step 3: Enable and Start Services**
```bash
sudo systemctl enable --now samba-ad-dc
sudo systemctl enable --now ntp
```

**Step 4: Configure DHCP Server**
```bash
sudo zypper install -y dhcp-server
sudo cp /etc/dhcpd.conf{,.backup}
cat << 'EOF' | sudo tee /etc/dhcpd.conf
subnet 192.168.1.0 netmask 255.255.255.0 {
  range 192.168.1.100 192.168.1.200;
  option routers 192.168.1.1;
  option domain-name-servers 192.168.1.10;
  option domain-name "greenleaf.local";
  default-lease-time 600;
  max-lease-time 7200;
}
EOF
sudo systemctl enable --now dhcpd
```

**Step 5: Configure DNS Server**
```bash
sudo zypper install -y bind bind-utils
sudo cp /etc/named.conf{,.backup}
cat << 'EOF' | sudo tee /etc/named.conf
options {
  directory "/var/lib/named";
  forwarders { 8.8.8.8; 8.8.4.4; };
  allow-query { any; };
};
zone "greenleaf.local" IN {
  type master;
  file "greenleaf.local.zone";
};
zone "1.168.192.in-addr.arpa" IN {
  type master;
  file "1.168.192.rev.zone";
};
EOF
sudo systemctl enable --now named
```

**Verification Summary:**
- Active Directory domain controller is operational
- DHCP server is serving addresses in range 192.168.1.100-200
- DNS server is resolving greenleaf.local domain
- Samba AD DC service is running and responsive

**Next Steps:**
1. Join Windows workstations to the domain using `greenleaf.local\Administrator` and the provided password
2. Configure Group Policy Objects (GPOs) for user and computer policies
3. Set up file sharing with `sudo zypper install -y samba-winbind` and configure shares in `/etc/samba/smb.conf`