[Samba] Domain member workstations on DHCP

Rowland penny rpenny at samba.org
Sun Feb 14 21:36:23 UTC 2016

On 14/02/16 21:06, Stuart Longland wrote:
> On 14/02/16 19:40, Rowland penny wrote:
>> On 14/02/16 03:38, Stuart Longland wrote:
>>> It doesn't seem to join without me putting that entry in /etc/hosts.  I
>>> haven't tried removing it (following the domain join) to see if it still
>>> works.
>>> What is the correct procedure here?
>> It all depends on how your Unix workstations get their dns info, you
>> need the line in /etc/hosts if they use a fixed ip, but if they get
>> their dns info from dhcp, you don't.
>> If you do use dhcp, you must ensure that the dhcp server sends the
>> correct info.
> Okay, well they do resolve via dynamic DNS to a hostname.  That was
> working prior to the move to ActiveDirectory.
>> To show this, from this netbook that uses dhcp and is joined to a domain:
>> rowland at debnet:~$ getent hosts debnet
>>   debnet.samdom.example.com
> Now this might be a fly in the ointment.  For us, the DHCP domain is
> dhcp.office.example.com, whereas the active directory domain is
> activedirectory.office.example.com.

I am fairly sure that isn't going to work, your clients need to be using 
the dns domain 'activedirectory.office.example.com' before the join.

> DHCP/DNS there is traditional ISC DHCPd/ISC BIND.  I suppose this means
> that I'll need to configure dhcp to talk to ActiveDirectory to update DNS?

Well, yes this is a possibility, but dhcp needs to be sending the AD 
domain name.
I actually run the dhcp servers on my DCs in failover mode, they update 
Bind9 running on the DCs.

>> and /etc/hosts only contains this:
>> rowland at debnet:~$ cat /etc/hosts
>>    localhost
>> # The following lines are desirable for IPv6 capable hosts
>> ::1     localhost ip6-localhost ip6-loopback
>> ff02::1 ip6-allnodes
>> ff02::2 ip6-allrouters
>> If your Unix workstations are running Ubuntu (and possibly other OS),
>> you may find a line starting '', if so, remove it and stop
>> network-manager using dnsmasq. Also note that must only point
>> to 'localhost'.
> Ahh, fun stuff, yes, most of them are Ubuntu systems.  I have a laptop
> here running Debian (and my personal one with Gentoo) but most systems
> are Ubuntu.

As I said, Ubuntu does funny things with dns and these are probably best 
turned off.


More information about the samba mailing list