[Samba] Samba 4 analyse

Stéphane_PURNELLE · External Since: May 22, 2009 Posts: 5

Hi,

My actual config

Samba 3 PDC, file and print server use openldap backend
Posix ACL on XFS FS using pam_ldap and ns_ldap.
independant wins and DNS server (not DDNS)

Can I have same configuration in samba 4 ?
LIke :
DC
flie server with posix ACL support and pam, ns_ldap .
independant wins and DNS server (not DDNS).

It's just an analyse !

Have a nice day

Stéphane

-----------------------------------
Stéphane PURNELLE Admin. Systèmes et Réseaux
Service Informatique Corman S.A. Tel : 00 32 (0)87/342467
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Stéphane_PURNELLE · External Since: May 22, 2009 Posts: 5

But I don't want to separate DC and file server.
And I don't want to redefine my ACL's (I use xfs filesystem).
I have more than 500 Go and many many ACL entries

My interest in samba 4 is GPO and AD protocol nothing else.

is samba 4 have unix layer in her internal ldap database which can I use
with s3fs (read from samba wiki) ?

Stéphane Purnelle

-----------------------------------
Stéphane PURNELLE Admin. Systèmes et Réseaux
Service Informatique Corman S.A. Tel : 00 32 (0)87/342467

Andrew Bartlett wrote on 03/06/2012 11:02:38:

> De : Andrew Bartlett
> A : Stéphane PURNELLE ,
> Cc : samba RemoveThis @lists.samba.org
> Date : 03/06/2012 11:02
> Objet : Re: [Samba] Samba 4 analyse
>
> On Wed, 2012-05-30 at 12:29 +0200, Stéphane PURNELLE wrote:
> > Hi,
> >
> > My actual config
> >
> >
> > Samba 3 PDC, file and print server use openldap backend
> > Posix ACL on XFS FS using pam_ldap and ns_ldap.
> > independant wins and DNS server (not DDNS)
> >
> > Can I have same configuration in samba 4 ?
> > LIke :
> > DC
> > flie server with posix ACL support and pam, ns_ldap .
> > independant wins and DNS server (not DDNS).
> >
> > It's just an analyse !
>
> You can still separate your DC from your file server. You then join the
> file server to the domain, and use winbindd (not nss_ldap).
>
> WINS need not be connected, but we need to have certain entries in the
> DNS server, and for dynamic DNS registration (which AD clients will want
> to do) you will need it to be on the DC. For these reasons we recommend
> the bind9 dlz plugin we provide.
>
> Andrew Bartlett
>
> --
> Andrew Bartlett
http://samba.org/~abartlet/
> Authentication Developer, Samba Team http://samba.org
>
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Alex Crow · External Since: Apr 30, 2007 Posts: 24

>> You can still separate your DC from your file server. You then join the
>> file server to the domain, and use winbindd (not nss_ldap).
>>
>> WINS need not be connected, but we need to have certain entries in the
>> DNS server, and for dynamic DNS registration (which AD clients will want
>> to do) you will need it to be on the DC. For these reasons we recommend
>> the bind9 dlz plugin we provide.
Hi,

I am in the situation you describe - I have separate DCs and file servers.

How do you maintain consistent uid/gid mappings in a Samba4 domain
without nss_ldap? We also have trusted domains in our setup, and
mappings are stored in LDAP Idmap ou. Is it possible to continue using
trusted domains this way?

Thanks

Alex

--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.

"Transact" is operated by Integrated Financial Arrangements plc
Domain House, 5-7 Singer Street, London EC2A 4BQ
Tel: (020) 7608 4900 Fax: (020) 7608 5300
(Registered office: as above; Registered in England and Wales under number: 3727592)
Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba