Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
SAMBA 4.22
Tranquil IT Linkedin Tranquil IT Discord Tranquil IT forum Tranqui IT YouTube chanel
Samba-AD documentation
Light Logo Dark Logo

Theoretical presentation of Samba-AD

  • History of Samba Active Directory
  • About the services that compose a Samba Active Directory server
    • About DNS
    • About LDAP
    • About Kerberos
    • About SMB and MS-RPC
    • About NTP
    • About FSMO roles
    • About Winbindd and IDMapping
    • Managing and storing password hashes
    • Trusts and Forests
    • Working with replicated Active Directory
    • About GPOs (Group Policy Objects)
    • About Samba CUPS Printing
  • Evolution of Samba since version 4

Installing and configuring Samba-AD

  • Dimensioning a Samba Active Directory server
  • Installing and configuring a Samba-AD server
    • Installing and configuring Samba-AD on RHEL and derivatives
    • Installing and configuring NTP Chrony for Samba-AD on Redhat and derivatives
    • Installing and configuring Hybrid DNS
    • Installing and configuring a secondary Samba-AD on Redhat and derivatives
    • Installing and configuring a Samba-AD RODC on Redhat or derivatives
    • Updating Samba-AD on RHEL and derivative
    • Preparing your Debian host
    • Installing and configuring Samba-AD on Debian
    • Installing and configuring NTP Chrony for Samba-AD Debian
    • Installing and configuring Hybrid DNS
    • Installing and configuring a secondary Samba-AD on Debian
    • Installing and Configuring Samba-AD RODC on Debian
    • Upgrading a Samba domain controller from Debian9 Stretch to Debian10 Buster
    • Upgrading a Samba domain controller and bind from Debian10 to Debian11
    • Upgrading a Samba domain controller from Debian11 Bullseye to Debian12 Bookworm
    • Upgrading a Samba domain controller from Debian12 Bookworm to Debian13 Trixie
    • Installing the standard graphical management tools for your Active Directory
    • Switching from an rfc2307 schema to a tdb schema
    • Switching from TDB storage to LMDB storage
    • Managing Samba from the command line

Securing Samba-AD

  • Advanced features of Samba Active Directory
    • Reinforcing the security of your Samba Active Directory domain
    • Applying a password strategy with Samba-AD
    • Configuring LAPS for Samba-AD
    • Resetting the krbtgt account password
    • Configuring Rsyslog for Samba-AD
    • Backing up and restoring a Samba domain
    • Configuring Fail2ban for Samba-AD
    • Storing Bitlocker keys in Samba Active Directory
    • Auditing Samba-AD with PingCastle
    • Change Domain Controler IP Address
    • Deny service account open Windows session
  • Samba-AD and MS-AD
    • Adding a Windows AD to your Samba Active Directory domain
    • Migrating a Samba domain to a Microsoft domain
    • Adding a Samba-AD in a Microsoft Active Directory domain
  • Forest Functional Level 2016 and AD Schema 2022

Configuring AD clients

  • Working with Samba-AD and Microsoft AD
    • Adding a Windows AD to your Samba Active Directory domain
    • Migrating a Samba domain to a Microsoft domain
  • Configuring Samba-AD as a file server
    • Setting up a Samba File Server on RedHat10 and derived distributions
    • Setting up a Samba File Server on Debian
    • Handling common errors with the Samba file server
  • Joining members to the Active Directory domain
    • Integrating Windows machines in the Samba-AD domain
    • Integrating Linux machines in the Samba-AD domain
    • Managing NTP on Windows clients
    • Applying group strategies to enhance security
    • Protecting Domain Windows PCs and Servers with SRP

Additional readings

  • Migrating from Samba3-NT4 to Samba-AD
  • Synchronizing SYSVOLs between multiple domain controllers
  • Rebuilding a crashed Domain Controller
  • Using Python to administer Samba-AD

Additional ressources

  • Final configuration of the smb.conf
  • Compiling Samba from source
  • Common mistakes with Samba-AD, tips and tricks
  • Transferring your Samba3-NT4 to a new host
  • Installing and configuring Bind-DLZ for Samba-AD on Debian
  • Installing and configuring Bind-DLZ for Samba-AD on RedHat

Appendix

  • Glossary
  • Contact Tranquil IT for your Samba-AD project
  • Useful links to our resources
  • Security Advisories
Back to top
View this page

Joining members to the Active Directory domainΒΆ

Joining a host to the domain

  • Integrating Windows machines in the Samba-AD domain
  • Integrating Linux machines in the Samba-AD domain
    • Redhat10 servers without graphics layer
    • Debian / Ubuntu servers without graphic layer
    • Joining the Linux machine to the domain

Securing Windows clients

  • Managing NTP on Windows clients
  • Applying group strategies to enhance security
  • Protecting Domain Windows PCs and Servers with SRP
Next
Integrating Windows machines in the Samba-AD domain
Previous
Handling common errors with the Samba file server
Copyright © 2025, Tranquil IT
Made with Sphinx and @pradyunsg's Furo