Bug 8392 - Allow setting DNS domainname != realm in provision
Allow setting DNS domainname != realm in provision
Product: Samba 4.0
Classification: Unclassified
Component: Other
All All
: P5 normal
: ---
Assigned To: Andrew Bartlett
Depends on:
  Show dependency treegraph
Reported: 2011-08-22 09:21 UTC by Arvid Requate
Modified: 2011-08-22 09:58 UTC (History)
0 users

See Also:

Add Option --dnsdomain to provision to allow dnsdomain != realm (4.85 KB, patch)
2011-08-22 09:50 UTC, Arvid Requate
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate 2011-08-22 09:21:39 UTC
Currently the provision code derives the DNS domainname from the Kerberos realm. The patch attached to this bug adds the option --dnsdomain to the provision code, allowing DNS domains to differ from the Kerbeos realm. Maybe additional places need to be fixed to complete this.
Comment 1 Arvid Requate 2011-08-22 09:50:22 UTC
Created attachment 6797 [details]
Add Option --dnsdomain to provision to allow dnsdomain != realm
Comment 2 Andrew Bartlett 2011-08-22 09:53:40 UTC
The fact that the DNS name and realm are connected is at the very heart of active directory.  Much more than this would need to be changed to permit this disconnection.

How would such a realm interact with Microsoft's implementation?

Why are you proposing this change?

I simply can't see how this can be made to work
Comment 3 Arvid Requate 2011-08-22 09:58:29 UTC
Ah, thanks for the answer, good to know that.