[Samba] Which guide is better for setting up and configuring Samba 4.23.5 as a Windows Server 2022 Active Directory Domain Controller?

[Turritopsis Dohrnii Teo En Ming]

On Friday, 27 February 2026 at 6:48 PM, Rowland Penny via samba <samba at lists.samba.org> wrote:

> On Fri, 27 Feb 2026 10:31:23 +0000
> Turritopsis Dohrnii Teo En Ming <teo.en.ming at protonmail.com> wrote:
> 
> > On Thursday, 26 February 2026 at 11:44 PM, Rowland Penny via samba
> > <samba at lists.samba.org> wrote:
> >
> > > On Thu, 26 Feb 2026 14:56:13 +0000
> > > Turritopsis Dohrnii Teo En Ming <teo.en.ming at protonmail.com> wrote:
> > >
> > > >
> > > > Since I am going to use Debian 13, I have found the following
> > > > guide.
> > > >
> > > > Guide: Installing and configuring Samba-AD on Debian
> > > > Link:
> > > > https://samba.tranquil.it/doc/en/samba_config_server-server_install_samba_debian.html
> > > >
> > > > Is this a good guide to follow?
> > > >
> > > > Thank you.
> > > >
> > >
> > > I personally would use the Samba packages from trixie-backports,
> > > which will get you Samba 4.23.5
> > >
> > > Then follow the tranquil IT page until you get to where it says:
> > >
> > > The Samba domain creation script creates an unnecessary
> > > /var/lib/samba/private/krb5.conf file. It must be removed and
> > > replaced by a symbolic link to the /etc/krb5.conf file:
> > >
> > > rm -f /var/lib/samba/private/krb5.conf
> > > ln -s /etc/krb5.conf /var/lib/samba/private/krb5.conf
> > >
> > > If you read the output from the samba-tool domain provision
> > > command, near the end you will find this:
> > >
> > > A Kerberos configuration suitable for Samba AD has been generated
> > > at /var/lib/samba/private/krb5.conf Merge the contents of this file
> > > with your system krb5.conf or replace it with this one. Do not
> > > create a symlink!
> > >
> > > That is the file that Tranquil IT is referring in their, in my
> > > opinion, incorrect statement. You need to copy
> > > /var/lib/samba/private/krb5.conf over /etc/krb5.conf I have no idea
> > > why Tranquil IT thinks the file that Samba creates is 'unnecessary'.
> > >
> > > Rowland
> >
> > Hi All,
> >
> > I have successfully provisioned Samba 4.22.6 as a Windows Server 2022
> > Active Directory Domain Controller and also joined Windows 11 Pro to
> > Samba 4.22.6 Active Directory Domain Controller, using the Tranquil
> > IT guide.
> >
> > No idea why I can't get the latest Samba 4.23.6 though.
> 
> Probably because it was only released this morning, I am running 4.23.5
> on my DCs and, presumably when the packages are built on Debian and
> released, I will shortly be running 4.23.6
> 
> >
> > I have also produced 2 videos and uploaded them to YouTube. You may
> > watch my YouTube videos.
> >
> > [1] YouTube video: Provisioning Samba 4.22.6 as a Windows Server 2022
> > Active Directory Domain Controller on Debian 13.3 Link:
> > https://www.youtube.com/watch?v=-W-Vafz0XZ8
> 
> Sorry, but I do not watch videos, I find it easier to read things,
> probably my age.
> 
> >
> > [2] YouTube video: Joining Windows 11 Pro to Samba 4.22.6 Active
> > Directory Domain Controller Link:
> > https://www.youtube.com/watch?v=G0z5dNFA6sc
> >
> > It is very easy to follow the Tranquil IT guide. I got my Samba
> > 4.22.6 Active Directory Domain Controller up in less than 1 hour.
> 
> It took you that long ;-)
> 
> Rowland

How do I use trixie-backports so that I can get the latest version of Samba?

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Extremely Democratic People's Republic of Singapore