[Samba] using samba-tool from a domain member other than the DC

[Rowland penny]

On 23/07/2020 19:31, Jason Keltz via samba wrote:
> Hi Rowland,
>
> I'm running smbd on the  DC.  I want to be able to do things like 
> adding a user, dns entry, etc. from my workstation without logging 
> into the DC.
>
> I can't get samba-tool to work with Kerberos, or ldaps, etc.

As I said, I cannot get ldaps to work (yet), but:

rowland at devstation:~$ sudo samba-tool group add newgroup -H 
ldap://dc01.samdom.example.com -k yes
[sudo] password for rowland:
Added group newgroup

'devstation' isn't a DC ;-)

Rowland