Active Directory Domain Controller using Linux KDC as replica

Question

Hello,

I am wondering if it is possible to include an MIT KDC in an Active Directory realm.

I know that is is possible to create trust relationships between AD and non AD realms,

but it is possible to have a linux KDC as an replica for the AD ?

Here is the background. We would like to transfer from AD to MIT KDC since our company are not support windows remote machine anymore. Therefore, we want to change to MIT KDC from windows Ad which provide kerberos server.

Creating trust relationships could work but too complicate.

If we can set up a MIT KDC replica, we can change master and slave role based on that.

I will be very applicate if someone could give me some clue.

Thanks.

Dolcino

Answer 1

Hello @Dolcino ,

Thank you for your confirmation.

After a lot of my research, I cannot find any references or links about your request.

And we have no such experience, either.

Please understand ,we mainly focus on the issues or questions about on-premise Windows AD DS or on-premise Windows AD domain.

For your request, I suggest you can try to consult the professional engineers from Linux product.

If it is impossible to include an MIT KDC in an Active Directory realm.

You can create trust relationships between AD and non AD realms.

Or you can set up Linux Domain start from scratch based on the following links.

Setting up Samba as an Active Directory Domain Controller
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller

Joining a Samba DC to an Existing Active Directory
https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.