[Samba] procedure to change DC password

[Kacper Wirski]

Thank You,

I already changed krbtgt, I meant computer account. Does changing domain 
controller password with this command require restart of samba service, 
won't it interrupt replication between controllers etc.? I have 3 dc's 
in my environment, that's why I'm asking.

Regards,

Kacper

W dniu 23.04.2025 o 15:32, Rowland Penny via samba pisze:
> On Wed, 23 Apr 2025 14:35:16 +0200
> Kacper Wirski via samba<samba at lists.samba.org> wrote:
>
>> What is the best approach to change samba ad dc's own password?
>> Windows machines change periodically, linux domain members can simply
>> re-join domain, but when it comes to DC's I can't find any
>> recommended steps? Is re-joining domain as domain controller viable
>> and doesn't create issues?
>>
>> I'm using lastest samba on debian bookworm from packages, not just
>> quite ready to update to the backports version, so it's still 4.17.
>>
>> Regards,
>>
>> Kacper
>>
>>
> Depends which password you are referring to, a computers or the krbtgt
> user.
>
> First is easy, logon to the computer, then run:
>
> sudo net ads changetrustpw
>
> For krbtgt, then read this:
>
> https://samba.tranquil.it/doc/en/samba_advanced_methods/samba_reset_krbtgt.html
>
> Rowland
>
>
>

-- 
Ta wiadomość e-mail została sprawdzona pod kątem wirusów przez oprogramowanie antywirusowe Avast.
www.avast.com