[Samba] Which guide is better for setting up and configuring Samba 4.23.5 as a Windows Server 2022 Active Directory Domain Controller?

[Rowland Penny]

On Fri, 27 Feb 2026 10:31:23 +0000
Turritopsis Dohrnii Teo En Ming <teo.en.ming at protonmail.com> wrote:

> On Thursday, 26 February 2026 at 11:44 PM, Rowland Penny via samba
> <samba at lists.samba.org> wrote:
> 
> > On Thu, 26 Feb 2026 14:56:13 +0000
> > Turritopsis Dohrnii Teo En Ming <teo.en.ming at protonmail.com> wrote:
> > 
> > >
> > > Since I am going to use Debian 13, I have found the following
> > > guide.
> > >
> > > Guide: Installing and configuring Samba-AD on Debian
> > > Link:
> > > https://samba.tranquil.it/doc/en/samba_config_server-server_install_samba_debian.html
> > >
> > > Is this a good guide to follow?
> > >
> > > Thank you.
> > >
> > 
> > I personally would use the Samba packages from trixie-backports,
> > which will get you Samba 4.23.5
> > 
> > Then follow the tranquil IT page until you get to where it says:
> > 
> > The Samba domain creation script creates an unnecessary
> > /var/lib/samba/private/krb5.conf file. It must be removed and
> > replaced by a symbolic link to the /etc/krb5.conf file:
> > 
> > rm -f /var/lib/samba/private/krb5.conf
> > ln -s /etc/krb5.conf /var/lib/samba/private/krb5.conf
> > 
> > If you read the output from the samba-tool domain provision
> > command, near the end you will find this:
> > 
> > A Kerberos configuration suitable for Samba AD has been generated
> > at /var/lib/samba/private/krb5.conf Merge the contents of this file
> > with your system krb5.conf or replace it with this one. Do not
> > create a symlink!
> > 
> > That is the file that Tranquil IT is referring in their, in my
> > opinion, incorrect statement. You need to copy
> > /var/lib/samba/private/krb5.conf over /etc/krb5.conf I have no idea
> > why Tranquil IT thinks the file that Samba creates is 'unnecessary'.
> > 
> > Rowland
> 
> Hi All,
> 
> I have successfully provisioned Samba 4.22.6 as a Windows Server 2022
> Active Directory Domain Controller and also joined Windows 11 Pro to
> Samba 4.22.6 Active Directory Domain Controller, using the Tranquil
> IT guide.
> 
> No idea why I can't get the latest Samba 4.23.6 though.

Probably because it was only released this morning, I am running 4.23.5
on my DCs and, presumably when the packages are built on Debian and
released, I will shortly be running 4.23.6

> 
> I have also produced 2 videos and uploaded them to YouTube. You may
> watch my YouTube videos.
> 
> [1] YouTube video: Provisioning Samba 4.22.6 as a Windows Server 2022
> Active Directory Domain Controller on Debian 13.3 Link:
> https://www.youtube.com/watch?v=-W-Vafz0XZ8

Sorry, but I do not watch videos, I find it easier to read things,
probably my age.

> 
> [2] YouTube video: Joining Windows 11 Pro to Samba 4.22.6 Active
> Directory Domain Controller Link:
> https://www.youtube.com/watch?v=G0z5dNFA6sc
> 
> It is very easy to follow the Tranquil IT guide. I got my Samba
> 4.22.6 Active Directory Domain Controller up in less than 1 hour.

It took you that long ;-)

Rowland