Active Directory

1. Introduction

I recently was assigned the task of joining a Debian server to a Windows Server 2003 Active Directory domain. Though most of the documentation I read for doing this was rather straightforward, 100% of that documentation turned out to be only 75% useful. While all were easy to follow, at the end of the day I found myself piecing together bits of information from all different sources. Only after deciphering cryptic log messages, consulting my colleagues, and experimenting did I finally have this working. Here I try to provide a complete walkthrough of this joining procedure, paying close attention to the often overlooked details I encountered in my trials.

I use:
Debian squeeze
samba 2:3.2.5-4l
winbind 2:3.2.5-4l
krb5-config 1.22
krb5-user 1.6.dfsg.4
[Read more…]

There may be some instances where you need to force replication between Active Directory replication partners(DC´s). There are several ways that this can be accomplished. The method we are going to look at is forcing replication through the Microsoft Management Console (MMC).

1. Go to Start > Programs > Administrative Tools > and open the “Active Directory Sites and Services” MMC.
2. Expand the “Sites” container in the left pane by clicking the plus (+) to the left of it.
3. Expand the container that represents the name of the site containing the server that needs to be synchronized.
4. Expand the “Servers” container and then expand the target server to display the NTDS settings object.
5. Click the “NTDS Settings” option. In the right pane should now be a list of the target server’s replication partners.
6. Right click a connection object in the right pane and click “Replicate Now”.

Debian join windows domain

Forcing Active Directory replication