[Samba] Join a subdomain DC to a domain DC

[Rowland Penny]

On Tue, 14 Nov 2017 21:32:17 -0200
Elias Pereira <empbilly at gmail.com> wrote:

> >
> > If your main domain is 'example.com' and you use 'ad.example.com'
> > as a
> >
> > dns subdomain of 'example.com', the Samba DC would be authoritative
> >
> > for 'ad.example.com', the AD clients would use the DC as their
> >
> > nameserver for the domain and anything unknown by the DC (google for
> >
> > instance, or anything in the 'example.com' domain) would be
> > forwarded
> >
> > to the 'example.com' DNS server.
> >
> >
> Ok. I get it now. That's exactly what I want to do. :D
> 
> I thought I could join this new DC with the old one, transfer the fsmo
> roles and demote, but now you said that this is not viable. :(
> 
> The big problem is that we already have users in this DC and in
> addition this DC is a fileserver too. Now it got worse, isn't it
> Rowland? :(
> 

I did say that you wouldn't like either option ;-)

You would have this problem if the DC was Windows DC, whoever set up
the domain made a bad choice, any AD DC that runs a dns server must be
authoritative for the domain.

Rowland