Unable to promote a Samba machine as DC

Jochy-0 · 11-06-2023, 11:29 AM

The command

samba-tool domain join samdom.example.com DC -U"SAMDOM\administrator"

returns

ERROR: Invalid role 'DC' (possible values: MEMBER, DC, RODC)

Funny enough, DC is an invalid role, but it's allowed. An oxymoron.

I guess, I'm missing a module.
I am using Alma 9.2, the latest Samba downloaded and installed on November 3rd, 2023. Everything is up to date. I can join this machine to the existing samdom.example.com domain successfully. I want to join it to an existing Windows 2008R2 domain as a 2nd domain controller. I also tried creating a new domain but with similar error messages.

Any idea would be highly welcome.

Jochy-0 · 11-07-2023, 02:26 AM

I tried something different:

# samba-tool domain provision --use-rfc2307 --interactive
samba-tool domain: no such subcommand: provision

Usage: samba-tool domain <subcommand>

Domain management.

Options:
-h, --help show this help message and exit

Available subcommands:
info - Print basic info about a domain and the DC passed as parameter.
join - Join domain as either member or backup domain controller.
leave - Cause a domain member to leave the joined domain.
For more help on a specific subcommand, please type: samba-tool domain <subcommand> (-h|--help)

No success. I am pretty sure, there is a module missing, but I have no f****** clue what.

rpenny · 11-07-2023, 02:42 AM

If I remember correctly, Alma is a RHEL clone and you cannot create a Samba AD DC on RHEL, the code just isn't there. Try Debian Bookworm instead.

Jochy-0 · 11-08-2023, 03:24 AM

Quote:

Originally Posted by rpenny

If I remember correctly, Alma is a RHEL clone and you cannot create a Samba AD DC on RHEL, the code just isn't there. Try Debian Bookworm instead.

Oh. Damn. Ok. "The code is not there" is exactly, what I thought. But I thought of myself being stupid, not of RedHat. So I'll try using Debian.

Thanks a lot, it's been very helpful! Saved me tons of time!