[Samba] Joining Samba RODC, NT_STATUS_NOT_SUPPORTED

[Oguz Yilmaz]

I have joined to central DC. AFAIK winbind/samba creates a machine
account? What other thing is done in Active Directory DC during join
process? I want to fully understand what samba is doing to be able to
guide DC administrator.

After this I can not join local DC again. If Central DC replicates
into local DC, this machine account etc should have been replicated
into local DC. Isnt it possible to disable this machine account
creation process?

Thank you

--
Oguz


On Fri, Oct 12, 2012 at 10:53 AM, Matthieu Patou <mat at samba.org> wrote:
> On 10/12/2012 12:05 AM, Oguz Yilmaz wrote:
>>
>> RODC is Windows Server 2008 R2 Enterprise 7601 Service Pack 1.
>> What do you suggest? We keep rodc as read only. How can I join and
>> continue to auth and get user list over read only dc?
>
> Your first problem is the join, I think this can only be done with a RWDC.
> As for the day to day use I think it's possible to use a RODC but if you
> didn't allow the RODC to replicate then every auth request will be proxied
> from the RODC to the RWDC.
> The list of users will be served by the RODC directly.
>
>
> Matthieu.
>
> --
> Matthieu Patou
> Samba Team
> http://samba.org
>