Using SAMBA as WinNT Domain Controller [Archive]

View Full Version : Using SAMBA as WinNT Domain Controller

Ektich

May 20, 2004, 13:50

See title. Any notes-comments from the people who already done so?

SAMBA is going to run on Debian Linux 3.0 (aka woody)

Ektich

Pascal

May 20, 2004, 14:40

Vse vrode by rabotaet normal'no.....
Ty by skazal, chto konkretno tebe nuzhno......

Ektich

May 20, 2004, 14:57

Pascal

May 20, 2004, 16:22

Eto v ideale.
Est' neskol'ko nuansov.
Windows Domain - eto ne tol'ko uchet\nye zapisi userov, noe eshe i ikh profiles, kuski registry i accounty dlya compov, vkhodyashikh v domain. Odnim slovom tam mnogo vsego, chto dolzhno byt' pereneseno.....
Klassicheskiy metod resheniya tvoey zadachi - nastroit' sambu kak backup domain controller, zapustit', porabotat' dnya 2 i popytat'sya vyklyuchit' primary domain controller. Po idee dolzhno vse zarabotat' na samoy sambe.

No esli nado konkretnee - chitay podrobno docs.
Potomu chto takogo roda migratsii ya ne delal.

Regards

Popravka
Samba-3 can not participate in true SAM replication and is therefore not able to employ precisely the same protocols used by MS Windows NT4. A Samba-3 BDC will not create SAM update delta files. It will not inter-operate with a PDC (NT4 or Samba) to synchronize the SAM from delta files that are held by BDCs.

Samba-3 cannot function as a BDC to an MS Windows NT4 PDC, and Samba-3 can not function correctly as a PDC to an MS Windows NT4 BDC. Both Samba-3 and MS Windows NT4 can function as a BDC to its own type of PDC.

Vzyato otsyuda.
http://us1.samba.org/samba/docs/man/howto/samba-bdc.html

Chestno govorya, kogda prochel etot kusok u menya propali idei, kak eto mozhno sdelat' bezboleznenno.

May 20, 2004, 17:49

Ideya prosta do uzhasa: est N-noe kolichestvo mashin (N >> 1). Smeshanno: Windows 2000, NT4.0 Workstation, neskolko 98, neskolko XP. Vse loginyatsa v NT Domain. NT Domain controller - starenkaya Windows NT 4.0 Server. Ya xochu v odin prekrasnij den etu NT4.0 Server vikluchit, vlkuchit novenkij Linux Debian, i chtobi na sledujushee utro mne ne prishlos bi begat ot mashini k mashine i vse tam perensatraivat.

V ideale End User ne dolzhen nichego pochustvovat!

znachit tak.

dlja windows 2000 workstationow - mozhno eshe izwratitsja i bolee ne menee prikrutit' samba kak domain controller .... t.e. w polnostju odnotipnoj srede .... esli nado w2000 i nt4.0/w98/w95 - eto uze problema, t.k. oni ne umejut shifrowat' paroli :)

dalee: kak polnocennyj PDC ono u tebja wse rawno ne wstanet ... t.e. (otnositel'no) ne civil'no budet pokazywatsja wse chto swjazanno s security/ownership.....
razdacha takih zhe praw sharing-a , kak pozowljaet win2000 server na NTFS - wozmozhno tol'ko na FreeBSD , na jadre s ACL podderzhkoj. nu i wsjakie takie gadosti ...

tak chto. shamanstwo s SAMBA - ono eshe to samoe udowo'stwie ... no w kakih-to situacijah ono prosto rulit.

wobshem moj sowet - esli rabotaet :) ne trogaj :) kak fileserwer/print server - wot tam samba rekomendowana imenno iz-za proizwoditel'nosti ... bezboleznenno wstaet w sluchae, esli tebe nuzhno _tol'ko_ avtorizirowat' uzerow. bez razdachi kakih-to windows specifichnyh weshej.

zadawaj woprosy dal'she :))))

Ektich

May 21, 2004, 08:46

Pascal: v principe nastroit Samba kak BDC v nashem sluchae ne udastsa. U PDC net IP addressa, i voobshe net TCP/IP. Tak chto mashinam pridetsa po novoj delat "Join the Domain" operaciju, no eto mi tut kak-nibud perezhivem :)

Originally posted by nm
dlja windows 2000 workstationow - mozhno eshe izwratitsja i bolee ne menee prikrutit' samba kak domain controller .... t.e. w polnostju odnotipnoj srede .... esli nado w2000 i nt4.0/w98/w95 - eto uze problema, t.k. oni ne umejut shifrowat' paroli

toest SAMBA rabotaet libo tolko s shifrovannimi parolami, libo tolko s neshifrovannimi?

Pro security/ownership -- ya sobiralsa experimentirovat s Linux+ACL yadrom. Esli ya nachnu esche FreeBSD zdes tolkat - tri drugix admina na menya silno obidyatsa... :)

V principe po bolshomu schetu ona dolzhna budet rabotat imenno kak File Server/Print Server, xotya ownership i "interesnie" permissions kak raz funkcii file servera (v moem ponimanii).

V obshem ya dam vam znat kak proydet installacia

Ektich :agree:

May 23, 2004, 18:54

Pascal: v principe nastroit Samba kak BDC v nashem sluchae ne udastsa. U PDC net IP addressa, i voobshe net TCP/IP. Tak chto mashinam pridetsa po novoj delat "Join the Domain" operaciju, no eto mi tut kak-nibud perezhivem :)

toest SAMBA rabotaet libo tolko s shifrovannimi parolami, libo tolko s neshifrovannimi?

AFAIR

Pro security/ownership -- ya sobiralsa experimentirovat s Linux+ACL yadrom. Esli ya nachnu esche FreeBSD zdes tolkat - tri drugix admina na menya silno obidyatsa... :)

V principe po bolshomu schetu ona dolzhna budet rabotat imenno kak File Server/Print Server, xotya ownership i "interesnie" permissions kak raz funkcii file servera (v moem ponimanii).

V obshem ya dam vam znat kak proydet installacia

Ektich :agree:

_interestnye_ permissions, esli opishesh pri pomozhi unixowskih - to wse horosho
nu ili postawish podderzhku ACL support ... auditing - zabud' :))))

Ektich

Nov 15, 2004, 17:02

Quick follow-up:
SAMBA 3 + LDAP работают как PDC для смешанной сети Windows 2000/ Wndows NT 4.0 Workstation/ Win 98. Кажется дажe пара WinXP есть. С паролями особых проблемм нет (пока), с permissions пока особо не баловались, но вроде на примитивном уровне (owner/group/everyone) тоже работает.