Difference between revisions of "Joining a Samba DC to an Existing Active Directory"

From SambaWiki
 
Line 1: Line 1:
−
= Samba4 joining a domain =
 +
= Samba4 joining a domain as a DC =
   
−
As of Samba4 alpha11, Samba4 now has the ability to join an existing Active Directory domain as an additional domain controller. The process of joining a Samba4 server to an existing domain is a bit different to
 +
As of Samba4 alpha11, Samba4 now has the ability to join an existing
  +
Active Directory domain as an additional domain controller. The
⚫
provisioning a new domain. This process is the equivalent of the 'dcpromo' command on Windows servers.
  
  +
process of joining a Samba4 server to an existing domain is a bit
  ⚫
different to provisioning a new domain. This process is the equivalent
  +
of the 'dcpromo' command on Windows servers.
  +
  +
This HOWTO will assume you configured and installed Samba in the default location of /usr/local/samba. It assumes
  +
you are joining Samba to an existing domain called 'samba.example.com'.
  +
  +
== Getting ready for joining Samba as a DC to an exiting domain ==
  +
  +
You need to build Samba4 as usual, but don't do the provision step. You should remove any existing smb.conf in /usr/local/samba/etc/smb.conf
  +
  +
You should have your Windows domain setup correctly as your default realm in /etc/krb5.conf, and you should have these options setup in /etc/krb5.conf:
  +
  +
[libdefaults]
  +
dns_lookup_realm = true
  +
dns_lookup_kdc = true
  +
default_realm = SAMBA.EXAMPLE.COM
  +
  +
You should then test to make sure that DNS and kerberos are setup correctly to point at your existing Windows DC. Test that it is all working by trying a kinit as a domain administration:
  +
  +
kinit administrator
  +
Password: XXXXXXXX
  +
  +
Once all that is setup you can move on to the main domain join step
  +
  +
== Joining the Windows domain as a DC ==
  +
  +
Run the following command as root:
  +
  +
bin/net vampire samba.example.com -Uadministrator --realm=samba.example.com
  +
  +
It should show a set of debug messages about replicating the domain contents, like this:
  +
  +
Partition[CN=Configuration,DC=sample,DC=example,DC=com] objects[1596] linked_values[1]
  +
  +
then it will show a message like this:
  +
  +
mark ROOTDSE with isSynchronized=TRUE
  +
Vampired domain VSOFS8 (S-1-5-21-2848215498-2472035911-1947525656)
  +
  +
at this point you have joined your Samba4 server to the Windows domain.

Revision as of 05:37, 26 February 2010

Samba4 joining a domain as a DC

As of Samba4 alpha11, Samba4 now has the ability to join an existing Active Directory domain as an additional domain controller. The process of joining a Samba4 server to an existing domain is a bit different to provisioning a new domain. This process is the equivalent of the 'dcpromo' command on Windows servers.

This HOWTO will assume you configured and installed Samba in the default location of /usr/local/samba. It assumes you are joining Samba to an existing domain called 'samba.example.com'.

Getting ready for joining Samba as a DC to an exiting domain

You need to build Samba4 as usual, but don't do the provision step. You should remove any existing smb.conf in /usr/local/samba/etc/smb.conf

You should have your Windows domain setup correctly as your default realm in /etc/krb5.conf, and you should have these options setup in /etc/krb5.conf: 

[libdefaults]
 dns_lookup_realm = true
 dns_lookup_kdc = true
 default_realm = SAMBA.EXAMPLE.COM

You should then test to make sure that DNS and kerberos are setup correctly to point at your existing Windows DC. Test that it is all working by trying a kinit as a domain administration: 

kinit administrator
Password: XXXXXXXX

Once all that is setup you can move on to the main domain join step

Joining the Windows domain as a DC

Run the following command as root: 

bin/net vampire samba.example.com -Uadministrator --realm=samba.example.com

It should show a set of debug messages about replicating the domain contents, like this: 

Partition[CN=Configuration,DC=sample,DC=example,DC=com] objects[1596] linked_values[1]

then it will show a message like this: 

mark ROOTDSE with isSynchronized=TRUE
Vampired domain VSOFS8 (S-1-5-21-2848215498-2472035911-1947525656)

at this point you have joined your Samba4 server to the Windows domain.

Retrieved from "https://wiki.samba.org/index.php?title=Joining_a_Samba_DC_to_an_Existing_Active_Directory&oldid=4982"