Armenian Knowledge Base  

Go Back   Armenian Knowledge Base > Technical sections > Operating Systems > Unix
Register

Reply
 
LinkBack Thread Tools
Old 20.05.2004, 14:50   #1
Guru Apprentice
 
Join Date: 02 2002
Location: /dev/null
Age: 41
Posts: 524
Downloads: 0
Uploads: 0
Reputation: 0 | 0
Question Using SAMBA as WinNT Domain Controller

See title. Any notes-comments from the people who already done so?

SAMBA is going to run on Debian Linux 3.0 (aka woody)

Ektich
Reply With Quote
Old 20.05.2004, 15:40   #2
Главный Лысый
 
Pascal's Avatar
 
Join Date: 10 2001
Location: AM
Age: 39
Posts: 2,829
Downloads: 4
Uploads: 0
Reputation: 28 | 4
Default

Vse vrode by rabotaet normal'no.....
Ty by skazal, chto konkretno tebe nuzhno......
Reply With Quote
Old 20.05.2004, 15:57   #3
Guru Apprentice
 
Join Date: 02 2002
Location: /dev/null
Age: 41
Posts: 524
Downloads: 0
Uploads: 0
Reputation: 0 | 0
Default

Ideya prosta do uzhasa: est N-noe kolichestvo mashin (N >> 1). Smeshanno: Windows 2000, NT4.0 Workstation, neskolko 98, neskolko XP. Vse loginyatsa v NT Domain. NT Domain controller - starenkaya Windows NT 4.0 Server. Ya xochu v odin prekrasnij den etu NT4.0 Server vikluchit, vlkuchit novenkij Linux Debian, i chtobi na sledujushee utro mne ne prishlos bi begat ot mashini k mashine i vse tam perensatraivat.

V ideale End User ne dolzhen nichego pochustvovat!
__________________
\/\/h47'5 1n 4 n4m3? 7h47 wh1(h w3 (4|| 4 r053,
8y 4ny 07h3r n4m3 w0u|d 5m3|| 45 5w337...
Reply With Quote
Old 20.05.2004, 17:22   #4
Главный Лысый
 
Pascal's Avatar
 
Join Date: 10 2001
Location: AM
Age: 39
Posts: 2,829
Downloads: 4
Uploads: 0
Reputation: 28 | 4
Default

Eto v ideale.
Est' neskol'ko nuansov.
Windows Domain - eto ne tol'ko uchet\nye zapisi userov, noe eshe i ikh profiles, kuski registry i accounty dlya compov, vkhodyashikh v domain. Odnim slovom tam mnogo vsego, chto dolzhno byt' pereneseno.....
Klassicheskiy metod resheniya tvoey zadachi - nastroit' sambu kak backup domain controller, zapustit', porabotat' dnya 2 i popytat'sya vyklyuchit' primary domain controller. Po idee dolzhno vse zarabotat' na samoy sambe.

No esli nado konkretnee - chitay podrobno docs.
Potomu chto takogo roda migratsii ya ne delal.

Regards

Popravka
Samba-3 can not participate in true SAM replication and is therefore not able to employ precisely the same protocols used by MS Windows NT4. A Samba-3 BDC will not create SAM update delta files. It will not inter-operate with a PDC (NT4 or Samba) to synchronize the SAM from delta files that are held by BDCs.

Samba-3 cannot function as a BDC to an MS Windows NT4 PDC, and Samba-3 can not function correctly as a PDC to an MS Windows NT4 BDC. Both Samba-3 and MS Windows NT4 can function as a BDC to its own type of PDC.

Vzyato otsyuda.
http://us1.samba.org/samba/docs/man/...samba-bdc.html


Chestno govorya, kogda prochel etot kusok u menya propali idei, kak eto mozhno sdelat' bezboleznenno.
__________________
Ruben Muradyan
Technical Director
PanARMENIAN Network: Armenian News

----------------------------------------------------
Лысина - это полянка, вытоптанная мыслями.
----------------------------------------------------

Last edited by Pascal; 20.05.2004 at 17:33.
Reply With Quote
Old 20.05.2004, 18:49   #5
ЙЦУКЕН
 
Join Date: 07 2002
Location: 0x68,0x69,0x72, 0x69,0x6e,0x67, 0x20,0x6e,0x6f, 0x77
Age: 47
Posts: 3,118
Downloads: 0
Uploads: 0
Reputation: 5 | 0
Default

Quote:
Originally Posted by Ektich
Ideya prosta do uzhasa: est N-noe kolichestvo mashin (N >> 1). Smeshanno: Windows 2000, NT4.0 Workstation, neskolko 98, neskolko XP. Vse loginyatsa v NT Domain. NT Domain controller - starenkaya Windows NT 4.0 Server. Ya xochu v odin prekrasnij den etu NT4.0 Server vikluchit, vlkuchit novenkij Linux Debian, i chtobi na sledujushee utro mne ne prishlos bi begat ot mashini k mashine i vse tam perensatraivat.

V ideale End User ne dolzhen nichego pochustvovat!

znachit tak.

dlja windows 2000 workstationow - mozhno eshe izwratitsja i bolee ne menee prikrutit' samba kak domain controller .... t.e. w polnostju odnotipnoj srede .... esli nado w2000 i nt4.0/w98/w95 - eto uze problema, t.k. oni ne umejut shifrowat' paroli

dalee: kak polnocennyj PDC ono u tebja wse rawno ne wstanet ... t.e. (otnositel'no) ne civil'no budet pokazywatsja wse chto swjazanno s security/ownership.....
razdacha takih zhe praw sharing-a , kak pozowljaet win2000 server na NTFS - wozmozhno tol'ko na FreeBSD , na jadre s ACL podderzhkoj. nu i wsjakie takie gadosti ...

tak chto. shamanstwo s SAMBA - ono eshe to samoe udowo'stwie ... no w kakih-to situacijah ono prosto rulit.

wobshem moj sowet - esli rabotaet ne trogaj kak fileserwer/print server - wot tam samba rekomendowana imenno iz-za proizwoditel'nosti ... bezboleznenno wstaet w sluchae, esli tebe nuzhno _tol'ko_ avtorizirowat' uzerow. bez razdachi kakih-to windows specifichnyh weshej.

zadawaj woprosy dal'she )))
Reply With Quote
Old 21.05.2004, 09:46   #6
Guru Apprentice
 
Join Date: 02 2002
Location: /dev/null
Age: 41
Posts: 524
Downloads: 0
Uploads: 0
Reputation: 0 | 0
Unhappy

Pascal: v principe nastroit Samba kak BDC v nashem sluchae ne udastsa. U PDC net IP addressa, i voobshe net TCP/IP. Tak chto mashinam pridetsa po novoj delat "Join the Domain" operaciju, no eto mi tut kak-nibud perezhivem

Quote:
Originally posted by nm
dlja windows 2000 workstationow - mozhno eshe izwratitsja i bolee ne menee prikrutit' samba kak domain controller .... t.e. w polnostju odnotipnoj srede .... esli nado w2000 i nt4.0/w98/w95 - eto uze problema, t.k. oni ne umejut shifrowat' paroli
toest SAMBA rabotaet libo tolko s shifrovannimi parolami, libo tolko s neshifrovannimi?

Pro security/ownership -- ya sobiralsa experimentirovat s Linux+ACL yadrom. Esli ya nachnu esche FreeBSD zdes tolkat - tri drugix admina na menya silno obidyatsa...

V principe po bolshomu schetu ona dolzhna budet rabotat imenno kak File Server/Print Server, xotya ownership i "interesnie" permissions kak raz funkcii file servera (v moem ponimanii).

V obshem ya dam vam znat kak proydet installacia

Ektich
Reply With Quote
Old 23.05.2004, 19:54   #7
ЙЦУКЕН
 
Join Date: 07 2002
Location: 0x68,0x69,0x72, 0x69,0x6e,0x67, 0x20,0x6e,0x6f, 0x77
Age: 47
Posts: 3,118
Downloads: 0
Uploads: 0
Reputation: 5 | 0
Default

Quote:
Originally Posted by Ektich
Pascal: v principe nastroit Samba kak BDC v nashem sluchae ne udastsa. U PDC net IP addressa, i voobshe net TCP/IP. Tak chto mashinam pridetsa po novoj delat "Join the Domain" operaciju, no eto mi tut kak-nibud perezhivem

toest SAMBA rabotaet libo tolko s shifrovannimi parolami, libo tolko s neshifrovannimi?
AFAIR

Quote:
Originally Posted by Ektich


Pro security/ownership -- ya sobiralsa experimentirovat s Linux+ACL yadrom. Esli ya nachnu esche FreeBSD zdes tolkat - tri drugix admina na menya silno obidyatsa...

V principe po bolshomu schetu ona dolzhna budet rabotat imenno kak File Server/Print Server, xotya ownership i "interesnie" permissions kak raz funkcii file servera (v moem ponimanii).

V obshem ya dam vam znat kak proydet installacia

Ektich
_interestnye_ permissions, esli opishesh pri pomozhi unixowskih - to wse horosho
nu ili postawish podderzhku ACL support ... auditing - zabud' )))
Reply With Quote
Old 15.11.2004, 17:02   #8
Guru Apprentice
 
Join Date: 02 2002
Location: /dev/null
Age: 41
Posts: 524
Downloads: 0
Uploads: 0
Reputation: 0 | 0
Default

Quick follow-up:
SAMBA 3 + LDAP работают как PDC для смешанной сети Windows 2000/ Wndows NT 4.0 Workstation/ Win 98. Кажется дажe пара WinXP есть. С паролями особых проблемм нет (пока), с permissions пока особо не баловались, но вроде на примитивном уровне (owner/group/everyone) тоже работает.
Reply With Quote
Sponsored Links
Reply

Thread Tools


На правах рекламы:
реклама

All times are GMT. The time now is 16:08.


Powered by vBulletin® Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.