-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Raj Pagaku wrote: > Thanks Jerry for your response as well as the useful link to the > reference article. > > Once I delegated the following Permissions' for the specific 'Domain > User' on the 'Computer Objects' on my AD server, I was able to join the > Samba system to the domain. > > Permissions Delegated via the 'Delegation Control Wizard': > 1> Allow 'Write DNS Host Name Attributes' property > 2> Allow 'Write Service Principal Name' property
You only need #1 I think. The validated write to SPN is help to ensure that matches the dNSHostName value. jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFFVPJ0IR7qMdg1EfYRArs8AKDXf5NlNbA0AmDiPiSMwA7veWiN4QCgvqDA O8z/4KrViwf9+CSlIAiY7HM= =LWkn -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
