Overview

LGF can operate a framework-owned Samba directory authority for host login, DNS, Kerberos, Windows domain joins, and RBAC mappings. The Domain view reports the current domain, provisioning state, internal health, DNS mode, listener mode, and LAN Domain Services state.

Read the Domain summary

  • Provisioning state indicates whether the authority has been created.
  • Internal health reports the local authority health check.
  • Domain is the Windows-style DNS domain name.
  • Kerberos realm is the uppercase Kerberos form of the domain.
  • DNS mode identifies the active DNS integration.
  • LAN Domain Services indicates whether domain clients can reach the directory, DNS, join services, and RSAT endpoints.

The dashboard status is healthy only when provisioning, internal health, and LAN Domain Services agree. A delayed or partial service startup should not be treated as healthy merely because one field has updated.

Domain setup modes

The initial setup wizard can create a new internal-only domain, promote the host into an existing domain, or join an existing domain as a member without creating a new authority. Domain join can use a supplied domain-controller address when DNS does not contain the required record.

Verification

  1. Open Settings > Security or the Domain details view.
  2. Confirm the domain and realm are expected.
  3. Confirm provisioning is provisioned.
  4. Confirm internal health is healthy.
  5. Confirm LAN Domain Services is Enabled when LAN clients need domain access.

Troubleshooting

The dashboard says Needs attention

Open Domain details and compare all three health inputs: provisioning state, internal health, and LAN Domain Services. The banner may appear while services are still converging; refresh after the service operation completes.

DNS is degraded

Verify the Samba DNS service and host DNS configuration. Domain clients need to resolve the domain and service records through the configured LGF DNS path.