[Samba] Joining Samba workstation as a Domain Member - Which is the correct way?

Rowland Penny rpenny at samba.org
Tue Oct 18 14:36:15 UTC 2016

See inline comments:

On Tue, 18 Oct 2016 14:57:49 +0100
Vasco Silva via samba <samba at lists.samba.org> wrote:

> Hi everyone,
> In my environment I am running a Domain Controller, on ubuntu 16.04, 
> samba v 4.11.
> My doubt is now on joining workstations to this domain. I was adding 
> joining the command "samba-tool domain join...", however, I found in
> the samba page: 
> https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member a 
> note to don't use samba-tool:
> "
>   The domain join
> *_A note on provisioning_:*A Domain Member_must not_be provisioned by 
> using "samba-tool"! This would setup an AD DC on your Domain Member
> with some parts turned off and writes to sam.ldb instead of
> passdb.tdb. Don't use this way to join, to avoid unwanted side
> effects! The Domain Member provisioning option will be removed in the
> future.
> The following command will join the host to the domain and
> automatically register/update its DNS record:
> "
> Which one is the correct way to join? Samba-tool or net ads join?

Use 'net ads join'
> I was convinced that samba-tool was correct! The help shows explicity 
> the option to join as Domain member:
> samba-tool domain join
> Usage: samba-tool domain join <dnsdomain> [DC|RODC|MEMBER|SUBDOMAIN] 
> [options]

Yes, I know it says that, but the domain member you get that way is
just a faulty part DC.

More information about the samba mailing list