I'm trying to join a Samba 4 domain using sssd as described in https://wiki.samba.org/index.php/Local_user_management_and_authentication/sssd I'm running into difficulty as there are two things that are unclear to me: 1. Do I have to do the exportkeytab procedure on the server or on the client? Is the principal name the server (AD DC) name or the client name? 2. Do I have to join the AD (net ads join...) Thanks Avishay