Joining samba4 to domain as PDC

[Andrew Bartlett]

On Sun, 2010-12-26 at 19:50 -0600, Michael Wichers wrote:
> Well, I went through the walkthroughs, and setup a domain controller running
> samba4.   The website states to report success or failures so here's the
> story of what happened.
> 
> I've setup samba4 as a primary domain controller.... got bind 9.7.2_P3
> running because I noticed the patches you have included are in the source
> for that version....works great
> I've gone to setup samba4 as a backup domain controller (on a different
> box).   After completing the samba-tools vampire command, I thought perhaps
> I could use this domain controller now.   I was wrong.

In what way could you not use it?

Once Samba starts (ie, you start the 'samba' binary), it will register
itself in DNS (assuming you have set the resolv.conf on your new server
to point at the existing DNS server). 

> /usr/local/samba/private/dns/<domainname>.zone did not get any new entries
> for the backup domain controller.   so I made a backup of this file, and
> even though it says "DO NOT EDIT THIS FILE"..... guess what I did....   

I think this is where you started to go wrong.  Samba when set up as an
additional DC in a windows domain is not a DNS server, and can not be.
That is because the original DC is the DNS server.  Clients and Samba
itself should be pointed at the original DC for their DNS server, and
will register themselves there.

In time, Samba will be able to use the in-directory DNS record storage,
but until then, we cannot host that functionality, except where we are
the first DC in the domain (in which case we can't share that role with
other DCs). 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.