We have an organizational Windows domain xxx.org which provides DHCP, Gateway, Network, Winbind, firewall, etc. At a remote site we have another domain yyy.org that we manage and control. Currently, all users at remote site, as part of the parent domain, login and authenticate accordingly.
Strictly for the purpose of user creation and authentication utilizing the email construct i.e. email@example.com we setup a ubuntu 14.04 server with Samba 4.1 Active Directory. Samba AD allows us to create users with the email construct. We can then, hopefully, SSO to services that require email construct login.
The problem is getting the windows client to join the yyy.org domain. We set the DNS IP to point to samba AD and we change the computers domain to yyy.org. But the client still binds to the parent domain.
Previously, in the process of experimentation, we setup Ubuntu to serve up DHCP and the client binding to yyy.org was successful. It may be we have to do this again, I’m not sure. As we said in the first post we have limited knowledge. And, of course, we want this to be seam-less to the parent domain.