# samba-tool group addmembers DnsAdmins dhcpduser # samba-tool user setexpiry dhcpduser -noexpiry

Now set the users password to never expire and add the user to the DnsAdmins group. # samba-tool user create dhcpduser -description='Unprivileged user for TSIG-GSSAPI DNS updates via ISC DHCP server' -random-password You need a user that the script will run as, set a random password because you will never logon as the user. You are doing this on the same DC as Bind9 is installed on.You have created any required reverse zones.Bind9_dlz is installed and working on the Samba AD DC, tested with various 9.x versions.The computer has been provisioned as an AD DC and the samba, smbd and winbindd daemons are running.The script has now been modified to use samba-tool instead of nsupdate, it also can optionally add the macAddress attribute to a computers AD object, this attribute will contain the computers MAC address. This HowTo is based on a Debian OS install, the paths given may be different if you use another OS. It has now been tested with the Samba AD internal DNS server and BIND9_DLZ. This HowTo describes how to configure isc DHCP to update Samba dns records in AD. 5 Create a user to carry out the updates.3 Names and Addresses used in this howto.

Siemens primary setup tool 4.1