samba - Jul 2016 - Joining Samba4 Member to Samba3 Domain

Before I start beating my head against the wall, is there a howto someplace
for joining a Samba4 member or BDC to a samba3 domain?  Am I going about
this all wrong?

I most likely will update the PDC to samba 4 next summer due to the amount
of automation we have to modify that leverages OpenLDAP.   The LDAP server
that comes with Samba4 seems kinda limited by comparison.

In the meantime, cannot seem to get Samba4 to join the NT4 domain.

The wiki article on this subject is empty, currently.

Can someone point me in the right direction?

Version 4.3.9-Ubuntu

smb.conf:

global]
workgroup = STANDARD
server string = %h server (Samba, Ubuntu)
security = DOMAIN
map to guest = Bad User
obey pam restrictions = Yes
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:*
%n\n *password\supdated\ssuccessfully* .
unix password sync = Yes
log file = /var/log/samba/log.%m
max log size = 1000
dns proxy = No
wins server = 10.100.0.2
usershare allow guests = Yes
panic action = /usr/share/samba/panic-action %d
idmap config * : backend = tdb

-- 
*Please note my new email address: jdavis at standardschools.net
<jdavis at standardschools.net>*

Jefferson K Davis,
Director, Technology and Information Systems

Standard School District
1200 North Chester Ave  Bakersfield, CA 93308

661.392.2110 ext 120 (office)
661.978.0859 (mobile)
http://district.standard.k12.ca.us 
<http://district.standard.k12.ca.us%20/>

District Users:  Click here to report technology issues
<https://support.standard.k12.ca.us/otrs/customer.pl>
*"Proper Prior Planning Promotes Peak Performance"*

On 07/29/2016 12:41 PM, Jefferson Davis wrote:
> Before I start beating my head against the wall, is there a howto someplace
> for joining a Samba4 member or BDC to a samba3 domain?  Am I going about
> this all wrong?
>
> I most likely will update the PDC to samba 4 next summer due to the amount
> of automation we have to modify that leverages OpenLDAP.   The LDAP server
> that comes with Samba4 seems kinda limited by comparison.
>
> In the meantime, cannot seem to get Samba4 to join the NT4 domain.
>
> The wiki article on this subject is empty, currently.
>
> Can someone point me in the right direction?
>
> Version 4.3.9-Ubuntu
>
> smb.conf:
>
> global]
> workgroup = STANDARD
> server string = %h server (Samba, Ubuntu)
> security = DOMAIN
> map to guest = Bad User
> obey pam restrictions = Yes
> pam password change = Yes
> passwd program = /usr/bin/passwd %u
> passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:*
> %n\n *password\supdated\ssuccessfully* .
> unix password sync = Yes
> log file = /var/log/samba/log.%m
> max log size = 1000
> dns proxy = No
> wins server = 10.100.0.2
> usershare allow guests = Yes
> panic action = /usr/share/samba/panic-action %d
> idmap config * : backend = tdb
>
Jefferson,

See if you can find the error in the logs of the member.  If you see 
"NT_STATUS_NO_LOGON_SERVERS", then the answer is probably the fact
that
you are using 4.3.x.  Since moving to that version, then 4.4 of Samba, 
the members will no longer serve shares or respond to testjoin queries 
or anything else that requires communication with the controller.  If 
you can find a 4.1 or 4.2 that installs in your OS, you may be able to 
get it to work.  Beyond that, I don't have any suggestions because I'm 
still searching for solutions myself. I'm fairly certain that NT4 bug 
fixes are not high priority now that AD functionality is the primary focus.

Good luck.

Dale