LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-25-2014, 02:44 PM   #1
felbvts
Member
 
Registered: Mar 2009
Posts: 38

Rep: Reputation: 3
Best way to repoint to new Domain Controllers


Hello!

I have a number of linux servers that are bound to Active Directory.
The Windows Domain Controllers are going to be updated and replaced... new names and new IPs. So I need to re-point my linux server to the new DCs. I am thinking that I need to drop off the network and re-join the domain for each server. (we're talking a good 100 -150 servers) Any suggestions on how to go about minimizing this? Can I add a DC to krb5.conf/smb.conf?

Thanks!
 
Old 02-25-2014, 04:40 PM   #2
Ser Olmy
Senior Member
 
Registered: Jan 2012
Distribution: Slackware
Posts: 2,404

Rep: Reputation: Disabled
No, you absolutely do NOT need to leave and rejoin the domain.

If you're using Samba 4.x or Samba 3 (in ads mode) with a recent version of Heimdal, krb5.conf can be left empty. The Heimdal Kerberos libraries are able to autodetect KDCs using DNS records. Of course, the Linux boxes must be using an AD-integrated DNS server for this to work.

Alternatively, specifying a new server in krb5.conf would also work, regardless of which Kerberos libraries (MIT Kerberos?) you're using.
 
Old 03-06-2014, 11:50 AM   #3
felbvts
Member
 
Registered: Mar 2009
Posts: 38

Original Poster
Rep: Reputation: 3
Thank you for the reply.

How would we add a server/ip to krb5.conf? does it need to be a new realm or more like a list?
the domain is the same just a new controller IP and name.
 
Old 03-06-2014, 04:20 PM   #4
Ser Olmy
Senior Member
 
Registered: Jan 2012
Distribution: Slackware
Posts: 2,404

Rep: Reputation: Disabled
An Active Directory domain IS a Kerberos Realm, so you'll have to add the server as a KDC to the existing realm.

But as I said, you may not have to use krb5.conf at all if you use Heimdal. What does kinit --version say?
 
Old 03-07-2014, 09:53 AM   #5
felbvts
Member
 
Registered: Mar 2009
Posts: 38

Original Poster
Rep: Reputation: 3
I am at version 5 for Kerberose & Samba version 3.5.6 (kinit --version is not working - doesn't look like it will work)
I am not inclined to change programs at this time.

I will add dc3.my.com as below????

[realms]
MY.COM = {
kdc = dc2.MY.com:88
kdc = dc3.MY.com:88
admin_server = dc2.my.com:749
admin_server = dc3.my.com:749
default_domain = my.com
}

Is this correct? Will it automatically switch over when the dc2 is taken away? How would I test this?

Thank you for all of your help!!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Samba and multiple domain controllers mmartin Linux - Newbie 2 06-24-2011 03:51 PM
Configure Samba for multiple AD Domain Controllers - How? forbin Linux - Server 3 03-07-2011 10:43 AM
Using winbind to authenitcate with multiple domain controllers sleepy0110 Linux - Server 0 11-27-2008 04:29 PM
Repoint MBR to Grub jackwessel Linux - Newbie 2 09-17-2006 07:11 PM
Repoint DNS in /etc/hosts Ephracis Linux - Networking 2 07-18-2005 08:21 AM


All times are GMT -5. The time now is 08:31 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration