Dear Samba team, Thanks very much for making AD trusts /really/ usable at last in 4.8. For my use case just allowing trusted groups to access file shares with correct permissions is good enough for now. Child domains would be nice too ;-) Well done and keep up the fantastic work you do. All the best, Alex -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its contents or use it in any way and are requested to delete the message along with any attachments and notify us immediately. This email is not intended to, nor should it be taken to, constitute advice. The information provided is correct to our knowledge & belief and must not be used as a substitute for obtaining tax, regulatory, investment, legal or any other appropriate advice. "Transact" is operated by Integrated Financial Arrangements Ltd. 29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608 5300. (Registered office: as above; Registered in England and Wales under number: 3727592). Authorised and regulated by the Financial Conduct Authority (entered on the Financial Services Register; no. 190856).
> Thanks very much for making AD trusts /really/ usable at last in 4.8. > For my use case just allowing trusted groups to access file shares with > correct permissions is good enough for now. Child domains would be nice > too ;-)Dear Samba developers, I’m also more interested by child domains rather than sites. I know that it is not supported yet, but I wonder if SUBDOMAIN join option of samba-tool is supposed to be for creating a child domain. There’s no documentation entries to explain how it is supposed to work, but I can see the option in the samba-tool usage:> Usage: samba-tool domain join <dnsdomain> [DC|RODC|MEMBER|SUBDOMAIN][options] and --parent-domain=PARENT_DOMAIN Any hint? TIA, Davy -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 195 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20180506/807aadb2/signature.sig>
> Thanks very much for making AD trusts /really/ usable at last in 4.8. > For my use case just allowing trusted groups to access file shares with > correct permissions is good enough for now. Child domains would be nice > too ;-)Dear Samba developers, I’m also more interested by child domains rather than sites. I know that it is not supported yet, but I wonder if SUBDOMAIN join option of samba-tool is supposed to be for creating a child domain. There’s no documentation entries to explain how it is supposed to work, but I can see the option in the samba-tool usage:> Usage: samba-tool domain join <dnsdomain> [DC|RODC|MEMBER|SUBDOMAIN] > [options]and --parent-domain=PARENT_DOMAIN Any hint? TIA, Davy -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 195 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20180506/67246d24/signature.sig>
On Sun, 6 May 2018 18:48:40 +0200 Davy Defaud via samba <samba at lists.samba.org> wrote:> > Thanks very much for making AD trusts /really/ usable at last in > > 4.8. For my use case just allowing trusted groups to access file > > shares with correct permissions is good enough for now. Child > > domains would be nice too ;-) > > Dear Samba developers, > > I’m also more interested by child domains rather than sites. I know > that it is not supported yet, but I wonder if SUBDOMAIN join option of > samba-tool is supposed to be for creating a child domain. > > There’s no documentation entries to explain how it is supposed to > work, but I can see the option in the samba-tool usage: > > > Usage: samba-tool domain join <dnsdomain> [DC|RODC|MEMBER|SUBDOMAIN] > > [options] > and --parent-domain=PARENT_DOMAIN > > Any hint? >Yes, they don't work (yet). In fact, up until recently, the only thing that worked was 'DC' Rowland