[Samba] [Fwd: Joining AD - wrong DNS name, wrong keytab]

[Rowland penny]

On 13/10/2020 09:10, Jan Zháňal via samba wrote:
> Maybe I wrote it misleading, its just a DNS name, not whole active
> directory subdomain.
>
> Jan
>
OK, lets us suppose that your AD uses the 'example.com' dns domain, this 
means your Kerberos realm will be 'EXAMPLE.COM'. You then want to join a 
computer in the 'base.example.com' dns domain, why ? and why do think it 
should work ?

The computer you are joining to a Samba AD domain should be in the AD 
dns domain, whilst it may join with an incorrect dns domain, any UPN and 
SPN's created will use the correct REALM for the AD domain.

Rowland