[Samba] samba 4 / replicate ldap

[L.P.H. van Belle]

Hai Andrew, 
thank you for you reply. 

In very short.

I want to replicate the database of samba4 to an other locations, over wan. 
I want to have 1 domainname for signon, windows wil choose the closed location, so this should work. 
Every other location wil have its own samba server ( in DC mode ), with proxy which is using the auth of samba. ( or info from local replicated read only ldap ) 
Since this is over wan, i want to replicate the database.

I install the extra server in the main location, then will move it to the external location. 
IP / DNS setup is nog problem for me, the location will have there own dhcp+dns server
the dns zone wil be replicated to the master dns ( aka samba AD server on mail lokation ) 

this way i can manage everythis from main location. 
Kix script is used for login script, these files are replicated between the netlogon folders. 
( and you i know the differences with sysvol ) I do windows/linux/novell servers. 

This setup works good with samba3, for years now. 
The total setup had debian with samba ddns+dhcp, proxy , webservers, mailservers ( with zarafa7 and yes, i have pro licence, for ad integration ). 
for most servers i can use the basic ldap info in the main location.

I read that replication over wan didnt work. with for example novell NDS, i can replicate 1 part of the NDS and as far i know this is not possible with AD. 

Louis


>-----Oorspronkelijk bericht-----
>Van: Andrew Bartlett [mailto:abartlet at samba.org] 
>Verzonden: dinsdag 9 oktober 2012 10:24
>Aan: L.P.H. van Belle
>CC: samba at lists.samba.org
>Onderwerp: Re: [Samba] samba 4 / replicate ldap
>
>On Tue, 2012-10-09 at 09:39 +0200, L.P.H. van Belle wrote:
>> Is there any good documentation on DRS and/or dirsync. 
>> Im looking for a example. 
>
>This page explains how to add additional Samba4 DCs to a domain:
>https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC
>
>> Because what i did find for now, it seems i have to stick to 
>samba 3. 
>
>Rather than asking how to do LDAP replication, perhaps you can explain
>what you want to achieve?
>
>Furthermore, the full facilities that Samba 3.x provided, including the
>LDAP passdb backend, remain in the Samba 4.0 release (use smbd/nmbd).
>However it won't be an AD Domain controller, it will still be what we
>now call a 'classic' domain controller (NT4-like).
>
>Andrew Bartlett
>
>-- 
>Andrew Bartlett                                
>http://samba.org/~abartlet/
>Authentication Developer, Samba Team           http://samba.org
>
>
>