Hello,
According to the https://wiki.samba.org/index.php/Set...ain_Controller tutorial, I want to launch a Samba DC.
I want to create a domain with the name "MYDOMAIN" and in below example, why "--realm" has a "SAMDOM" prefix?
Is "SAMDOM" the name of the DC server?

Thank you.

No, at least not as I understand it. If I am correct: in the example SAMDOM is the name of the domain, and SAMDOM.EXAMPLE.COM the name of the kerberos realm therein.

1 members found this post helpful.

the name of the DC server would be something like: DC1.SAMDOM.EXAMPLE.COM.
As it was explained on that page:

Thanks.
Why "--realm" has a prefix?
What happened if I use "--realm=EXAMPLE.COM --domain=SAMDOM"?

I cannot answer that. I know that KERBEROS was an FOSS project, and that Microsoft adopted parts of it, rewrote them (very slightly), and integrated them into the domain system. While there are little differences between the MS protocol and the more advanced FOSS KERBEROS they will always continue to communicate unless MS breaks the current domain system. The version MS pulled from is now OLD, and the communication between the two is a little odd. I have NOT researched at the SAMBA site or discussed the communication with the developers.

One thing to keep in mind is that the RHELM is NOT the DOMAIN. The two interact,and that interaction is critical. But they started out way back when (and somewhat continue on the SAMBA side) as different things that COULD be used together. It is important to set each up just right to make sure that they DO work together, because they are integrated on the Microsoft side and breaking one breaks both.

I think that many of the HOW-TO documents and tutorials do not make the difference, and interaction, clear enough. It would be easier to make everything work if the user understood them better individually first, then learned how to make them agree.

If you decide to run tests of that I recommend you do so on a test machine where you do not care greatly if your break the membership and authentication totally.

Thank you.
How can I find the correct answer?

I would start with the SAMBA group web sites, documentation, WIKI, and forums. Those are the developer domains where you can run into the people who know ALL of it.

Start with https://wiki.samba.org
and https://www.samba.org

1 members found this post helpful.

Thanks but not working. any another solution.