A successful Samba 4 deployment

[Andrew Bartlett]

On Tue, 2010-11-09 at 11:00 -0500, Mark Rutherford wrote:
> We have been running for almost 2 weeks now without any major problems.
> All the problems I have encountered have been minor and fixed fairly 
> quickly.

> The second issue has been time on clients.
> I have ntpd running on the DC but windows clients just throw event logs 
> about not being able to get time from the domain controller for the
> last 8 times, etc etc.
> I have read some places that Windows uses sntp instead of ntp so I am 
> not really sure about what I should be doing.

They are essentially the same protocol for PC-level clients, and they
use real NTP now anyway.  

You need to install a current version of the ntp server, and have it
compiled with the options to know to talk to samba.  (compile ntp with
the --enable-ntp-signd configure option or use current debian or
ubuntu). 

in the ntp.conf you need (from memory)

restrict mynet mssntp
signdsocketdir /data/samba/samba4/prefix/var/run/ntp_signd/

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20101110/d2ac2b40/attachment.pgp>