Talk:Samba/Active Directory domain controller

== Missing step == Under interactive provision explanations, the following step is missing.
DNS forwarder IP address (write 'none' to disable forwarding) [172.16.212.2]:
Feel free to add. Otherwise, I should/will in the future. Also, considering adding
listen-on { all; }; to /etc/named.conf . it's also worth while to note that the dlz_bind9_11.so part in named.conf should be rewritten so that the conf doesn't need to be updated every time the version of binded is incremented StrayArch (talk) 19:48, 27 January 2017 (UTC)

Another missing step is the execution of

samba_upgradedns --dns-backend=BIND9_DLZ

to generate dns.keytab StrayArch (talk) 04:21, 28 January 2017 (UTC)

https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End

The above links should be helpful in updating the wiki (a future task). StrayArch (talk) 04:43, 28 January 2017 (UTC)

Thank you for your contributions. Please go ahead and make the above changes if you are able to do so. I don't get much of a chance to use Arch at this time. Eventually...but tied up for now. DJ L (talk) 03:35, 15 March 2017 (UTC)

Finally got around to looking at the page, and samba_upgradedns was not required on a new provision. I did run into it when adding a second DC and addressed it there. I'm going to leave this as is for now, but if anybody runs into it, add the steps. DJ L (talk)