samba - Jun 2025 - Question RE expired autogenerated certificates

Hello community, I am facing a situation where I need valid certificates 
on our two DCs; I need to attach a mailserver via LDAPS which rejects 
expired certificates and it seems there is no way to circumvent that.
The default certs are expired as the DCs have been setup more than two 
years ago.
I know that the default certificates can be replaced by removing them 
and restarting samba, but before doing such a thing on? a production DC 
I would like to make sure tihs has no unintended consequences.
Especially I am not sure where these certificates are used, also in 
client-server communication? Will the clients accept the new certificate 
straigtaway? We are talking about Ubuntu 22 LTS server.

Thank ou for helping, Jakob

Hi all, sorry, nobody has an idea here? Are these certificates only used 
for LDAPS or also for inter-DC communication?

Regards, Jakob

Am 10.06.2025 um 22:46 schrieb Jakob Curdes via samba:
> Hello community, I am facing a situation where I need valid 
> certificates on our two DCs; I need to attach a mailserver via LDAPS 
> which rejects expired certificates and it seems there is no way to 
> circumvent that.
> The default certs are expired as the DCs have been setup more than two 
> years ago.
> I know that the default certificates can be replaced by removing them 
> and restarting samba, but before doing such a thing on? a production 
> DC I would like to make sure tihs has no unintended consequences.
> Especially I am not sure where these certificates are used, also in 
> client-server communication? Will the clients accept the new 
> certificate straigtaway? We are talking about Ubuntu 22 LTS server.
>
> Thank ou for helping, Jakob
>