Subdomain support in the AD DC!

Andrew Bartlett abartlet at
Sun Sep 8 22:27:05 CEST 2013

On Fri, 2013-09-06 at 08:51 +0200, Volker Lendecke wrote:
> On Fri, Sep 06, 2013 at 03:55:28PM +1200, Andrew Bartlett wrote:
> > Just as a heads-up, another of the projects that is actively being
> > worked on (I'll update the wiki) is subdomain support. 
> > 
> > My focus right now is to get 'make test' to have a parent/child domain
> > running.  Currently I can run 'SELFTEST_TESTENV=subdom_dc make testenv'
> > and the join passes, but the server itself won't run.  I'll continue to
> > work on this. 
> > 
> > I mention this to give some hope that we will finish this feature, and
> > to encourage anybody interested in taking on the winbind part of the
> > puzzle (needed for passing on NTLM authentication between domains in
> > particular), to step forward.  (Otherwise I'll tackle that next,
> > hopefully during SDC). 
> Obvious question: Which winbind? :-)

I wrote in detail here:

And I raised that again when we discussed async gensec issues:

Do you have anything more to add?

Andrew Bartlett

Andrew Bartlett
Authentication Developer, Samba Team 
Samba Developer, Catalyst IT         

More information about the samba-technical mailing list