Using SAMBA as WinNT Domain Controller

[Ektich]

See title. Any notes-comments from the people who already done so?

SAMBA is going to run on Debian Linux 3.0 (aka woody)

Ektich

[Pascal]

Vse vrode by rabotaet normal'no.....
Ty by skazal, chto konkretno tebe nuzhno......

[Ektich]

Ideya prosta do uzhasa: est N-noe kolichestvo mashin (N >> 1). Smeshanno: Windows 2000, NT4.0 Workstation, neskolko 98, neskolko XP. Vse loginyatsa v NT Domain. NT Domain controller - starenkaya Windows NT 4.0 Server. Ya xochu v odin prekrasnij den etu NT4.0 Server vikluchit, vlkuchit novenkij Linux Debian, i chtobi na sledujushee utro mne ne prishlos bi begat ot mashini k mashine i vse tam perensatraivat.

V ideale End User ne dolzhen nichego pochustvovat!

[Pascal]

Eto v ideale.
Est' neskol'ko nuansov.
Windows Domain - eto ne tol'ko uchet\nye zapisi userov, noe eshe i ikh profiles, kuski registry i accounty dlya compov, vkhodyashikh v domain. Odnim slovom tam mnogo vsego, chto dolzhno byt' pereneseno.....
Klassicheskiy metod resheniya tvoey zadachi - nastroit' sambu kak backup domain controller, zapustit', porabotat' dnya 2 i popytat'sya vyklyuchit' primary domain controller. Po idee dolzhno vse zarabotat' na samoy sambe.

No esli nado konkretnee - chitay podrobno docs.
Potomu chto takogo roda migratsii ya ne delal.

Regards

Popravka
Samba-3 can not participate in true SAM replication and is therefore not able to employ precisely the same protocols used by MS Windows NT4. A Samba-3 BDC will not create SAM update delta files. It will not inter-operate with a PDC (NT4 or Samba) to synchronize the SAM from delta files that are held by BDCs.

Samba-3 cannot function as a BDC to an MS Windows NT4 PDC, and Samba-3 can not function correctly as a PDC to an MS Windows NT4 BDC. Both Samba-3 and MS Windows NT4 can function as a BDC to its own type of PDC.

Vzyato otsyuda.
http://us1.samba.org/samba/docs/man/...samba-bdc.html


Chestno govorya, kogda prochel etot kusok u menya propali idei, kak eto mozhno sdelat' bezboleznenno.

[nm]

Originally Posted by Ektich

Ideya prosta do uzhasa: est N-noe kolichestvo mashin (N >> 1). Smeshanno: Windows 2000, NT4.0 Workstation, neskolko 98, neskolko XP. Vse loginyatsa v NT Domain. NT Domain controller - starenkaya Windows NT 4.0 Server. Ya xochu v odin prekrasnij den etu NT4.0 Server vikluchit, vlkuchit novenkij Linux Debian, i chtobi na sledujushee utro mne ne prishlos bi begat ot mashini k mashine i vse tam perensatraivat.

V ideale End User ne dolzhen nichego pochustvovat!

znachit tak.

dlja windows 2000 workstationow - mozhno eshe izwratitsja i bolee ne menee prikrutit' samba kak domain controller .... t.e. w polnostju odnotipnoj srede .... esli nado w2000 i nt4.0/w98/w95 - eto uze problema, t.k. oni ne umejut shifrowat' paroli

dalee: kak polnocennyj PDC ono u tebja wse rawno ne wstanet ... t.e. (otnositel'no) ne civil'no budet pokazywatsja wse chto swjazanno s security/ownership.....
razdacha takih zhe praw sharing-a , kak pozowljaet win2000 server na NTFS - wozmozhno tol'ko na FreeBSD , na jadre s ACL podderzhkoj. nu i wsjakie takie gadosti ...

tak chto. shamanstwo s SAMBA - ono eshe to samoe udowo'stwie ... no w kakih-to situacijah ono prosto rulit.

wobshem moj sowet - esli rabotaet ne trogaj kak fileserwer/print server - wot tam samba rekomendowana imenno iz-za proizwoditel'nosti ... bezboleznenno wstaet w sluchae, esli tebe nuzhno _tol'ko_ avtorizirowat' uzerow. bez razdachi kakih-to windows specifichnyh weshej.

zadawaj woprosy dal'she )))

[Ektich]

Pascal: v principe nastroit Samba kak BDC v nashem sluchae ne udastsa. U PDC net IP addressa, i voobshe net TCP/IP. Tak chto mashinam pridetsa po novoj delat "Join the Domain" operaciju, no eto mi tut kak-nibud perezhivem

Originally posted by nm
dlja windows 2000 workstationow - mozhno eshe izwratitsja i bolee ne menee prikrutit' samba kak domain controller .... t.e. w polnostju odnotipnoj srede .... esli nado w2000 i nt4.0/w98/w95 - eto uze problema, t.k. oni ne umejut shifrowat' paroli

toest SAMBA rabotaet libo tolko s shifrovannimi parolami, libo tolko s neshifrovannimi?

Pro security/ownership -- ya sobiralsa experimentirovat s Linux+ACL yadrom. Esli ya nachnu esche FreeBSD zdes tolkat - tri drugix admina na menya silno obidyatsa...

V principe po bolshomu schetu ona dolzhna budet rabotat imenno kak File Server/Print Server, xotya ownership i "interesnie" permissions kak raz funkcii file servera (v moem ponimanii).

V obshem ya dam vam znat kak proydet installacia

Ektich

[nm]

Originally Posted by Ektich

Pascal: v principe nastroit Samba kak BDC v nashem sluchae ne udastsa. U PDC net IP addressa, i voobshe net TCP/IP. Tak chto mashinam pridetsa po novoj delat "Join the Domain" operaciju, no eto mi tut kak-nibud perezhivem

toest SAMBA rabotaet libo tolko s shifrovannimi parolami, libo tolko s neshifrovannimi?

AFAIR

Originally Posted by Ektich

Pro security/ownership -- ya sobiralsa experimentirovat s Linux+ACL yadrom. Esli ya nachnu esche FreeBSD zdes tolkat - tri drugix admina na menya silno obidyatsa...

V principe po bolshomu schetu ona dolzhna budet rabotat imenno kak File Server/Print Server, xotya ownership i "interesnie" permissions kak raz funkcii file servera (v moem ponimanii).

V obshem ya dam vam znat kak proydet installacia

Ektich

_interestnye_ permissions, esli opishesh pri pomozhi unixowskih - to wse horosho
nu ili postawish podderzhku ACL support ... auditing - zabud' )))

[Ektich]

Quick follow-up:
SAMBA 3 + LDAP работают как PDC для смешанной сети Windows 2000/ Wndows NT 4.0 Workstation/ Win 98. Кажется дажe пара WinXP есть. С паролями особых проблемм нет (пока), с permissions пока особо не баловались, но вроде на примитивном уровне (owner/group/everyone) тоже работает.