search for: anything_you_like

...t; At present we use fixed MAC:IP:Name matches and the DHCP writes > corresponding DNS records into bind. I am afraid we can't use such setup > anymore, too, can we? Is 'intra.our.tld' a registered domain ? If you do have a registered domain, I would suggest something like 'anything_you_like.your.registered.domain.tld', do not use your registered domain, use a subdomain of your registered domain. Depending on how much data you have, it might just be easier and better to start anew, that way you can lose all the bad practices of the past (using the RID for Unix ID's etc) If...

...is not recommended to use this, because if you do, your AD DCs & clients may be resolvable from the internet. You are recommended to use a sub domain i.e. if your registered domain is 'example.com', you would use 'internal.example.com' or 'samdom.example.com' or 'anything_you_like.example.com'. Once you have decide what your dns domain is going to be called, you must set the machine that the DC is going to be provisioned on, to use this domain, give it a fixed ip, set /etc/hosts, make sure that 'hostname -f' returns the correct FQDN and 'hostname -s'...

Louis and Rowland -- thank you, Gents! Making progress. Kerberos is operational and handing out tickets, but I was only able to test using: kinit administrator at EXAMPLE.COM vs. the Samba AD DC HOWTO: administrator at SAMDOM.EXAMPLE.COM - - - - - - - - - - - - - - - - - - - - - - - Per Rowland's dns naming example - my hostname output: ~]# hostname -s samba ~]# hostname -f

Hi, I am about to spend one week of my holidays with transfering our (about 20 clients) NT4 domain to a AD DC one. We are running a samba NT4 PDC on debian buster which is offering dns (bind9) and dhcp (isc-dhcpd), too. I have an older server where I can play with an AD DC setup. If I see I won't make it in a week, I would like to be able to return as smooth as possible to the present