Samba 4 join the domain as secondary domain controller

Andrew Bartlett abartlet at
Mon Oct 22 22:22:09 MDT 2012

On Mon, 2012-10-22 at 21:09 -0600, BlackPenguin ADMIN wrote:
> In the doc, the following line is specified for joining the domain:
> bin/samba-tool domain join DC -Uadministrator 
> If my PDC is and I want the secondary controller to be 
>, what would be the kerberos config and the samba-tool 
> command for this? Second machine should have a different name as sdc... 
> Should the secondary domain controller read-only? Can it be in 
> read-write mode? What am I missing here?

This will create a new read-write DC, of the same name as the host it is
running on.

What you are probably missing is the need to also get sysvol replicated
(manually) once you get the DC up and going. 

It really is meant to be simple, just try it out!

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 

More information about the samba-technical mailing list