join as DC fails: LDAP error 10 LDAP_REFERRAL, or how to properly create application directory partition

Andrew Bartlett abartlet at
Wed Jun 27 08:16:42 UTC 2018

On Wed, 2018-06-27 at 12:09 +0400, Alexey Sheplyakov via samba-
technical wrote:
> On 06/25/2018 05:39 PM, Alexey Sheplyakov wrote:
> > Hi,
> > 
> > On 06/25/2018 05:30 PM, Rowland Penny wrote:
> > 
> >  > Try adding '--server=dc0' to the join command.
> > 
> > This works, however my goal is to get samba-tool to do the right thing 
> > (pick the correct server, delay the creation of partition, whatever) 
> > automatically.
> The attached patch makes `samba-tool domain join` connect to the domain 
> naming master when joining a new DC (unless the DC to talk with has
> been explicitly specified via --server=smth).


I'm confused, where in the join is it creating an application
partition?  I can imagine it replicating such, but where does it create


Andrew Bartlett

Andrew Bartlett             
Authentication Developer, Samba Team
Samba Developer, Catalyst IT

More information about the samba-technical mailing list