samba - Mar 2021 - Disable NETBIOS during "domain provision" or "domain join" (Samba 4 AD)

On 20/03/2021 09:34, Johannes Kastl via samba wrote:
> Good morning everyone,
>
> first off, sorry if this question was answered before, I found nothing 
> matching my queries (or my search foo is just too bad...). Apologies 
> if there is documentation which I managed to miss...
>
> 1. Is there a way to disable NETBios during the initial provisioning 
> of a domain via "samba-tool domain provision"?
>
> 2. Is there a way to disable NETBios during joining a secondary DC / 
> read-only DC via "samba-tool domain join..."?
>
> I found these instructions to disable it later, but then I would still 
> have the netbios-names somewhere in DNS (and maybe other places...). 
> And I am not sure if those are intended for file servers or if those 
> are supposed to be used on Samba 4 AD DCs at all.
>
> ?????? disable netbios = yes
> ?????? smb port = 445
>
> In my case the hostnames of the machines are too long to result in 
> different netbios names (15 characters is very short), 

Initially, I thought you were referring to the netbios domain name aka 
workgroup, but it sounds like you are referring to the computers short 
hostname. The 15 character limit on the hostname length is dictated by 
Active Directory, so the cure for your problem is easy, stop using very 
long hostnames.

sorry if this isn't what you wanted to hear, but it is something that 
would happen on a Windows domain.

Rowland

Hi Rowland,

thanks for the fast answer.

On 20.03.21 at 11:04 Rowland penny via samba wrote:
> Initially, I thought you were referring to the netbios domain name aka 
> workgroup, but it sounds like you are referring to the computers short
hostname.
> The 15 character limit on the hostname length is dictated by Active
Directory,
> so the cure for your problem is easy, stop using very long hostnames.
Actually I was half expecting this answer, but I was hoping there would be 
another way...
> sorry if this isn't what you wanted to hear, but it is something that
would
> happen on a Windows domain.
Understood, not samba's fault. :-)

But: Is the computer's shortname actually really needed? Or can the use of
the
short NETBios names be disabled?

Kind Regards,
Johannes

-- 
Johannes Kastl
Linux Consultant & Trainer
Tel.: +49 (0) 151 2372 5802
Mail: kastl at b1-systems.de

B1 Systems GmbH
Osterfeldstra?e 7 / 85088 Vohburg
http://www.b1-systems.de
GF: Ralph Dehner
Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20210320/e1f8e0f9/OpenPGP_signature.sig>