HI, Has anyone successfully installed samba ad dc ( active directory domain controller ) in Rocky linux? If so, what does it take? Red Hat briefly mentions that samba ad dc is not supported. Thanks for your help

Thank you. I managed using the link you provided.

That’s not the full truth. The issue is MIT vs Heimdal kerberos. Red Hat compiles against MIT kerberos. In Fedora land, it is possible to install samba and get the AD functionality, but it’s experimental, not recommended, and missing general functionality to run a functioning AD forest.

I rebuilt the Samba stack with AD DC enabled for testing purposes: https://copr.fedorainfracloud.org/coprs/ligenix/enterprise-samba-AD-DC/

It looks like you built Samba with MIT, if so, why ? Did you miss the word ‘experimental’ in the ‘–with-experimental-mit-ad-dc’ configure switch ?

As I wrote, this is for testing purposes. Anyway there is only a dc bcond for --without-ad-dc option, that I set to off for EL and tag the release with _?AD, so –with-experimental-mit-ad-dc is activated by default in Fedora/CentOS Stream/RHEL.

This may be relevant: cve-details The samba package as shipped with Red Hat Enterprise Linux 6, 7, 8 and 9 and Red Hat Gluster is not affected by this issue as Red Hat doesn’t provide the AD domain controller capability with it. That’s why you need to recompile samba from scratch if you want it to…

I know this is a little bit of an old post, but I created a script that will build all the requirements for samba, download samba-latest, configure the system and at the end, provide you a fully functional samba AD-DC server. You don’t have to worry about all the building… the script will do it for …

First bit of feedback: Why would you change the default NTP pool? The ntp pool provided by chrony is from ntp.org already. I see no evidence of static addressing being detected and warning if it’s not. You are asking the user to disable selinux, an absolutely critical security component of the ope…

Thank you for the feedback. In no way was I trying to mis-represent. I appreciate your input and the time you took replying, I took it to heart and will further work on my idea. Thank you. So In the meantime, for those of us that do want to use Rocky as an AD server, what are the options? Thank you…

I know you weren’t trying to misrepresenting anyone or anything. I’ve just seen over the years some configurations or processes that may be problematic down the road for the user that does them, since they sometimes miss things such as updates and the like. A lot of guides/scripts out there are one-…

Samba ad dc ( active directory domain controller )

Rocky Linux Help & Support

ligenix August 8, 2023, 9:05am 10

CVE-2023-0225 samba: AD DC “dnsHostname”

Fixed In Version: samba 4.18.1, samba 4.17.7, samba 4.16.10

The rebuild is currently samba 4.18.5 with DC enabled.

Thanks for reporting.

Topic		Replies	Views
Samba AD DC installation on Rocky Linux 9 (issues) Rocky Linux Help & Support rocky-linux-9	14	523	September 28, 2025
Can anyone point me to a Samba installation guide for Rocky 8? Rocky Linux Help & Support	40	5648	January 28, 2024
Samba AD Domain Controller: How To Rocky Linux Help & Support	2	2911	August 30, 2023
Samba shares authenticated by Active Directory Rocky Linux Help & Support	23	10140	August 25, 2023
Rocky Linux fails when tries to authenticate users using SSSD service Rocky Linux Help & Support	6	6601	August 25, 2023

Samba ad dc ( active directory domain controller )

Related topics