Pour pouvoir joindre un contrôleur de domaine, il faut configurer le serveur de DNS de la machine.
Par exemple, avec /etc/resolv.conf

/etc/resolv.conf

search domain.tld
nameserver 192.168.4.2

Pour commencer, on va installer les packets nécessaires (ignorez les configurations demandées):

# apt install acl attr samba krb5-user krb5-config winbind smbclient

Il vous faudra commencer par arrêter samba :

# systemctl stop nmbd smbd winbind

Il vous faudra modifier la configuration de samba :

/etc/samba/smb.conf

[global]
	workgroup = DOMAIN
	security = ADS
	realm = DOMAIN.TLD
 
	winbind refresh tickets = Yes
	vfs objects = acl_xattr
	map acl inherit = Yes
	store dos attributes = Yes
 
        log file = /var/log/samba/log.%m
        max log size = 1000
        panic action = /usr/share/samba/panic-action %d
        map to guest = Bad User
        server role = member
 
[Mon partage]
        path = /opt/Mon partage
        read only = No

Il vous faudra configurer Kerberos ¹⁾:

/etc/krb5.conf

[libdefaults]
    dns_lookup_realm = false
    dns_lookup_kdc = true
    default_realm = DOMAIN.TLD

# net ads join -U administrateur

Enter administrator's password: Passw0rd
Using short domain name -- DOMAIN
Joined 'fs' to dns domain 'domain.tld'

# systemctl start nmbd smbd