Samba

• Migrating Active Directory to Samba, One Domain Controller at a Time

  Replacing two Windows Server 2019 domain controllers with Samba AD via an in-place replica join — preserving every SID so no workstation ever notices, executed across one night and the following day, split by an AI usage-limit reset.

• Preparing the Windows Fleet for Samba

  Before the domain controllers could move to Samba, the rest of the Windows fleet had to come under Ansible management and trust a new root CA — the evening of prep work the migration blitz depended on.

• The PKI Detour: A Week on the Wrong Cert Strategy, Three FreeIPA Failures

  Part 5 of the downsizing series: a week chasing the wrong cert strategy, three FreeIPA failures, and why step-ca ended up carrying the PKI load.