samba - Apr 2021 - Outdated warning in wiki page Joining Samba as a Domain Member ?

Hello Samba folks,

I was wondering about a warning in the Samba Wiki (Setting up Samba as a
Domain Member):
https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Joining_the_Domain
This page mentions the following warning:

"Do not join a domain member using samba-tool domain join. This option is
unsupported, does not work and can cause problems with your AD replication.
The option will be removed from samba-tool in a future release."

I don't see any hint whether this is still a valid warning or if it can be
ignored. The man page of samba-tool does not mention any deprecation
warning or similar on the domain join sub-command.

It seems that this is an old relict from the first creation of that Wiki
page in October 2015 (see
https://wiki.samba.org/index.php?title=Setting_up_Samba_as_a_Domain_Member&oldid=11099#The_domain_join).


thx for clarification,
ck

On 01/04/2021 06:57, Claudio Kuenzler via samba wrote:
> Hello Samba folks,
>
> I was wondering about a warning in the Samba Wiki (Setting up Samba as a
> Domain Member):
>
https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Joining_the_Domain
> This page mentions the following warning:
>
> "Do not join a domain member using samba-tool domain join. This option
is
> unsupported, does not work and can cause problems with your AD replication.
> The option will be removed from samba-tool in a future release."
>
> I don't see any hint whether this is still a valid warning or if it can
be
> ignored. The man page of samba-tool does not mention any deprecation
> warning or similar on the domain join sub-command.
>
> It seems that this is an old relict from the first creation of that Wiki
> page in October 2015 (see
>
https://wiki.samba.org/index.php?title=Setting_up_Samba_as_a_Domain_Member&oldid=11099#The_domain_join).
>
>
> thx for clarification,
> ck
No, you cannot use samba-tool to create a domain member (yet), I am not 
quite sure what you get when you try, but it isn't a domain member.

I say 'yet' because someone is working on making 'samba-tool domain 
join' a link to 'net ads join', just like realmd.

Rowland

On Thu, 2021-04-01 at 07:57 +0200, Claudio Kuenzler via samba
wrote:
> Hello Samba folks,
> 
> I was wondering about a warning in the Samba Wiki (Setting up Samba
> as a
> Domain Member):
>
https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Joining_the_Domain
> This page mentions the following warning:
> 
> "Do not join a domain member using samba-tool domain join. This
> option is
> unsupported, does not work and can cause problems with your AD
> replication.
> The option will be removed from samba-tool in a future release."
> 
> I don't see any hint whether this is still a valid warning or if it
> can be
> ignored. The man page of samba-tool does not mention any deprecation
> warning or similar on the domain join sub-command.
> 
> It seems that this is an old relict from the first creation of that
> Wiki
> page in October 2015 (see
>
https://wiki.samba.org/index.php?title=Setting_up_Samba_as_a_Domain_Member&oldid=11099#The_domain_join).
This is because the 'samba-tool' command set comes from the AD DC side
of the codebase, from a time when Samba forked into two different
halves.

It, until this MR is merged, changes some slightly different databases
and has a different set of behaviour.  With no known use cases for the
'samba4' join code this is being replaced.

https://gitlab.com/samba-team/samba/-/merge_requests/1616

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions