[Samba] [Fwd: Joining AD - wrong DNS name, wrong keytab]
rpenny at samba.org
Tue Oct 13 08:32:06 UTC 2020
On 13/10/2020 09:10, Jan Zháňal via samba wrote:
> Maybe I wrote it misleading, its just a DNS name, not whole active
> directory subdomain.
OK, lets us suppose that your AD uses the 'example.com' dns domain, this
means your Kerberos realm will be 'EXAMPLE.COM'. You then want to join a
computer in the 'base.example.com' dns domain, why ? and why do think it
should work ?
The computer you are joining to a Samba AD domain should be in the AD
dns domain, whilst it may join with an incorrect dns domain, any UPN and
SPN's created will use the correct REALM for the AD domain.
More information about the samba