[Samba] Which guide is better for setting up and configuring Samba 4.23.5 as a Windows Server 2022 Active Directory Domain Controller?

[Turritopsis Dohrnii Teo En Ming]

On Thursday, 26 February 2026 at 11:44 PM, Rowland Penny via samba <samba at lists.samba.org> wrote:

> On Thu, 26 Feb 2026 14:56:13 +0000
> Turritopsis Dohrnii Teo En Ming <teo.en.ming at protonmail.com> wrote:
> 
> >
> > Since I am going to use Debian 13, I have found the following guide.
> >
> > Guide: Installing and configuring Samba-AD on Debian
> > Link:
> > https://samba.tranquil.it/doc/en/samba_config_server-server_install_samba_debian.html
> >
> > Is this a good guide to follow?
> >
> > Thank you.
> >
> 
> I personally would use the Samba packages from trixie-backports, which
> will get you Samba 4.23.5
> 
> Then follow the tranquil IT page until you get to where it says:
> 
> The Samba domain creation script creates an unnecessary /var/lib/samba/private/krb5.conf file. It must be removed and replaced by a symbolic link to the /etc/krb5.conf file:
> 
> rm -f /var/lib/samba/private/krb5.conf
> ln -s /etc/krb5.conf /var/lib/samba/private/krb5.conf
> 
> If you read the output from the samba-tool domain provision command, near the end you will find this:
> 
> A Kerberos configuration suitable for Samba AD has been generated at /var/lib/samba/private/krb5.conf
> Merge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!
> 
> That is the file that Tranquil IT is referring in their, in my opinion, incorrect statement.
> You need to copy /var/lib/samba/private/krb5.conf over /etc/krb5.conf
> I have no idea why Tranquil IT thinks the file that Samba creates is 'unnecessary'.
> 
> Rowland

Hi All,

I have successfully provisioned Samba 4.22.6 as a Windows Server 2022 Active Directory Domain Controller and also joined Windows 11 Pro to Samba 4.22.6 Active Directory Domain Controller, using the Tranquil IT guide.

No idea why I can't get the latest Samba 4.23.6 though.

I have also produced 2 videos and uploaded them to YouTube. You may watch my YouTube videos.

[1] YouTube video: Provisioning Samba 4.22.6 as a Windows Server 2022 Active Directory Domain Controller on Debian 13.3
Link: https://www.youtube.com/watch?v=-W-Vafz0XZ8

[2] YouTube video: Joining Windows 11 Pro to Samba 4.22.6 Active Directory Domain Controller
Link: https://www.youtube.com/watch?v=G0z5dNFA6sc

It is very easy to follow the Tranquil IT guide. I got my Samba 4.22.6 Active Directory Domain Controller up in less than 1 hour.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Extremely Democratic People's Republic of Singapore
27 Feb 2026 Friday 6.30 pm Singapore Time