From 80d32b8bfcc9a7805d864bd60d89d747bbe9ad0d Mon Sep 17 00:00:00 2001 From: =?utf8?q?G=C3=BCnther=20Deschner?= Date: Wed, 6 May 2009 15:43:23 +0200 Subject: [PATCH] s3-docs: Fix Bug #6331. Document "net dom join/net dom unjoin". Guenther (cherry picked from commit e398f1e91575909d2a90fab1e6f00804815a0b2f) --- docs-xml/manpages-3/net.8.xml | 81 +++++++++++++++++++++++++++++++++++ 1 file changed, 81 insertions(+) diff --git a/docs-xml/manpages-3/net.8.xml b/docs-xml/manpages-3/net.8.xml index 17de1907a16..995f28b6145 100644 --- a/docs-xml/manpages-3/net.8.xml +++ b/docs-xml/manpages-3/net.8.xml @@ -1640,6 +1640,87 @@ See the smb.conf 5 + +DOM + +Starting with version 3.2.0 Samba has support for remote join and unjoin APIs, both client and server-side. Windows supports remote join capabilities since Windows 2000. + +In order for Samba to be joined or unjoined remotely an account must be used that is either member of the Domain Admins group, a member of the local Administrators group or a user that is granted the SeMachineAccountPrivilege privilege. + + +The client side support for remote join is implemented in the net dom commands which are: + +net dom join - Join a remote computer into a domain. +net dom unjoin - Unjoin a remote computer from a domain. + + + + +DOM JOIN <replaceable>domain=DOMAIN</replaceable> <replaceable>ou=OU</replaceable> <replaceable>account=ACCOUNT</replaceable> <replaceable>password=PASSWORD</replaceable> <replaceable>reboot</replaceable> + + +Joins a computer into a domain. This command supports the following additional parameters: + + + +DOMAIN can be a NetBIOS domain name (also known as short domain name) or a DNS domain name for Active Directory Domains. As in Windows, it is also possible to control which Domain Controller to use. This can be achieved by appending the DC name using the \ separator character. Example: MYDOM\MYDC. The DOMAIN parameter cannot be NULL. + +OU can be set to a RFC 1779 LDAP DN, like ou=mymachines,cn=Users,dc=example,dc=com in order to create the machine account in a non-default LDAP containter. This optional parameter is only supported when joining Active Directory Domains. + +ACCOUNT defines a domain account that will be used to join the machine to the domain. This domain account needs to have sufficient privileges to join machines. + +PASSWORD defines the password for the domain account defined with ACCOUNT. + +REBOOT is an optional parameter that can be set to reboot the remote machine after successful join to the domain. + + + + + +Note that you also need to use standard net paramters to connect and authenticate to the remote machine that you want to join. These additional parameters include: -S computer and -U user. + + + Example: + net dom join -S xp -U XP\\administrator%secret domain=MYDOM account=MYDOM\\administrator password=topsecret reboot. + + +This example would connect to a computer named XP as the local administrator using password secret, and join the computer into a domain called MYDOM using the MYDOM domain administrator account and password topsecret. After successful join, the computer would reboot. + + + + + +DOM UNJOIN <replaceable>account=ACCOUNT</replaceable> <replaceable>password=PASSWORD</replaceable> <replaceable>reboot</replaceable> + + +Unjoins a computer from a domain. This command supports the following additional parameters: + + + +ACCOUNT defines a domain account that will be used to unjoin the machine from the domain. This domain account needs to have sufficient privileges to unjoin machines. + +PASSWORD defines the password for the domain account defined with ACCOUNT. + +REBOOT is an optional parameter that can be set to reboot the remote machine after successful unjoin from the domain. + + + + + +Note that you also need to use standard net paramters to connect and authenticate to the remote machine that you want to unjoin. These additional parameters include: -S computer and -U user. + + + Example: + net dom unjoin -S xp -U XP\\administrator%secret account=MYDOM\\administrator password=topsecret reboot. + + +This example would connect to a computer named XP as the local administrator using password secret, and unjoin the computer from the domain using the MYDOM domain administrator account and password topsecret. After successful unjoin, the computer would reboot. + + + + + + HELP [COMMAND] -- 2.34.1