[Samba] Unable to join domain

[Rowland Penny]

On Tue, 2021-10-05 at 08:54 -0400, Rob Campbell wrote:
> I did not build samba so according to the document, it's using
> Heimdal KDC not MIT KDC.

If you are using the standard fedora packages as a DC, then you are
using MIT, they are compiled with MIT. 
> 
> You cannot run samba-tool dns zonecreate 10.0.0.10 0.0.10.in-
> addr.arpa if samba isn't running

Good catch, I have updated the wiki page

> Immediately after starting samba, the instructions say to test the
> File Server.
> Verifying the File Server
> To list all shares provided by the DC:
> 
> Using the Domain Controller as a File Server
> Whilst the Samba AD DC is able to provide file shares, just like all
> other installation modes, the Samba team does not recommend using a
> DC as a file server for the following reasons:
> 
> For anything but the smallest organisations, having more than one DC
> is a really good backup measure, and makes upgrades safer
> 
> There are only 3 people in this organization so I think that
> qualifies as small.

You probably couldn't get smaller, but you need to be aware of the
problems.

> 
> Join a domain
> https://www.redhat.com/sysadmin/linux-active-directory
> https://cloud.google.com/managed-microsoft-ad/docs/quickstart-domain-join-linux
> https://www.techrepublic.com/article/how-to-join-a-linux-computer-to-an-active-directory-domain/
> 
> You keep saying you can't use realm join a domain but you haven't
> said the correct way to join a domain.

You have been reading our wiki, did you miss this:
https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory

realmd is really meant to join a Linux computer to IPA or AD as member
server.

Rowland