[Samba] Odd problems making AD DC

[Andrew Bartlett]

On Thu, 2020-10-29 at 20:47 -0600, Dan Egli via samba wrote:
> On 10/29/2020 6:13 PM, Jeremy Allison wrote:
> > Dan, Rowland spends an inordinate amount of time on
> > our lists helping out people with Samba configurations
> > of all kinds. The least people can do is to be polite
> > when asking for help.
> > 
> 
> I was under the impression that I was being sarcastic/funny. If I
> didn't
> come across that way, then I am sorry. I certainly didn't intend to
> come
> across as rude or anything of the sort.
> 
> I am confused why Jeremy would say to use MIT vs Heimdal when the
> message I sent clearly shows an mit-krb5 package, but I had no intent
> of
> being rude. It's entirely possible he simply missed that detail. If
> that's the case I most certainly didn't want to come across as
> offensive. Again, if I failed to convey my thoughts correctly, I do
> humbly apologize.

Please just use the bundled, internal Heimdal KDC.  It requires no
special configuration, everything is included.

Your problem may simply be over-thinking the problem - unlike Samba of
old where you had to manually build things up with OpenLDAP et al,
everything is included in the AD DC.

Instructions on building Samba are on our wiki, otherwise good packages
are available from various places, just don't use the vendor provided
packages on Fedora or RHEL as a DC (for this reason as they enable the
experimental MIT KDC).

Andrew Bartlett

-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba