samba - Aug 2012 - Best way to add samba4 to existing domain

I have Samba4 running, and it had a win2k3 server joined to it.  This is 
working great.
I'd like to add another Ubuntu 12.04 server with samba4 beta5.  What's
the
best join method?

Do I provision the server as a member, then join using samba-tools domain 
join <domain>
When I do it looks like it doesn't replicate the directory, just forwards?

Should I provision as a DC with the same settings and then do the join?  
This fails with a IO_TIMEOUT sort of error.

Is there another method that I just haven't discovered yet?

Thanks in advance for all the great help.

Caleb

I followed this link
http://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC
which was very helpful.  I was leaving a few things out that might be 
helpful to others.

My steps were:

-build Samba4 but don't provision.

-I added the fully qualified domain names of all the other server to the 
machine I looking to have join the domain.  This allowed kinit to work.

-run command:
samba-tool domain join <domain> DC -Uadministrator --realm-<realm
name>

This worked like a charm.  Much easier that I was making in my head.

> I have Samba4 running, and it had a win2k3 server joined to it.  This is
> working great.
> I'd like to add another Ubuntu 12.04 server with samba4 beta5. 
What's the
> best join method?
> 
> Do I provision the server as a member, then join using samba-tools domain
> join <domain>
> When I do it looks like it doesn't replicate the directory, just
forwards?
> 
> Should I provision as a DC with the same settings and then do the join?
> This fails with a IO_TIMEOUT sort of error.
> 
> Is there another method that I just haven't discovered yet?
> 
> Thanks in advance for all the great help.
> 
> Caleb
> 
> 
>

First both  Samba4 dcs must know each other by dns. Do not provision the
second samba4 as you want it to be in replication mode. Do not start samba
on your new DC!!
Then on your new DC: bin/net vampire your.realm. -Uadministrator
--realm=your.realm
If this is successful. Start samba on your new DC. 
Go on your 1st DC you setup.
Now type:   bin/ldbsearch -H /usr/local/samba/private/sam.ldb
objectclass=ntdsdsa objectguid --cross-ncs
EX result:

# record 1
dn: CN=NTDS
Settings,CN=NODE1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
ation,DC=tuebingen,DC=tst,DC=loc
objectGUID: 365d2a9f-bfe6-462d-965e-8622bfefc190

# record 2
dn: CN=NTDS
Settings,CN=NODE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
ation,DC=tuebingen,DC=tst,DC=loc
objectGUID: d6160c39-0810-4026-aa24-91c91797d892

Do not forget to update your dns settings after all.

Good Luck
Daniel
 

-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------

-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
Im
Auftrag von Caleb O'Connell
Gesendet: Dienstag, 7. August 2012 15:10
An: samba at lists.samba.org
Betreff: [Samba] Best way to add samba4 to existing domain

I have Samba4 running, and it had a win2k3 server joined to it.  This is
working great.
I'd like to add another Ubuntu 12.04 server with samba4 beta5.  What's
the
best join method?

Do I provision the server as a member, then join using samba-tools domain
join <domain> When I do it looks like it doesn't replicate the
directory,
just forwards?

Should I provision as a DC with the same settings and then do the join?  
This fails with a IO_TIMEOUT sort of error.

Is there another method that I just haven't discovered yet?

Thanks in advance for all the great help.

Caleb



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On 8 August 2012 08:02, Daniel M?ller <mueller at tropenklinik.de>
wrote:
> First both  Samba4 dcs must know each other by dns. Do not provision the
> second samba4 as you want it to be in replication mode. Do not start samba
> on your new DC!!
> Then on your new DC: bin/net vampire your.realm. -Uadministrator
> --realm=your.realm
"net vampire" was the old way.  Now you should use "samba-tool
domain join".
> If this is successful. Start samba on your new DC.
> Go on your 1st DC you setup.
> Now type:   bin/ldbsearch -H /usr/local/samba/private/sam.ldb
> objectclass=ntdsdsa objectguid --cross-ncs
> EX result:
>
> # record 1
> dn: CN=NTDS
>
Settings,CN=NODE1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
> ation,DC=tuebingen,DC=tst,DC=loc
> objectGUID: 365d2a9f-bfe6-462d-965e-8622bfefc190
>
> # record 2
> dn: CN=NTDS
>
Settings,CN=NODE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
> ation,DC=tuebingen,DC=tst,DC=loc
> objectGUID: d6160c39-0810-4026-aa24-91c91797d892
>
> Do not forget to update your dns settings after all.
>
> Good Luck
> Daniel
-- 
Michael Wood <esiotrot at gmail.com>