[Samba] procedure to change DC password

[Rowland Penny]

On Wed, 23 Apr 2025 14:35:16 +0200
Kacper Wirski via samba <samba at lists.samba.org> wrote:

> What is the best approach to change samba ad dc's own password?
> Windows machines change periodically, linux domain members can simply
> re-join domain, but when it comes to DC's I can't find any
> recommended steps? Is re-joining domain as domain controller viable
> and doesn't create issues?
> 
> I'm using lastest samba on debian bookworm from packages, not just
> quite ready to update to the backports version, so it's still 4.17.
> 
> Regards,
> 
> Kacper
> 
>

Depends which password you are referring to, a computers or the krbtgt
user.

First is easy, logon to the computer, then run:

sudo net ads changetrustpw

For krbtgt, then read this:

https://samba.tranquil.it/doc/en/samba_advanced_methods/samba_reset_krbtgt.html

Rowland