[Samba] Samba 4 Restrict User Create

Greg Zartman gzartman at koozali.org
Mon Nov 17 13:38:52 MST 2014


On Mon, Nov 17, 2014 at 12:32 PM, Rowland Penny <rowlandpenny at googlemail.com
> wrote:

>  Well Bind (or Named as you probably call it) is rock solid and you
> definitely need to consider resolving DNS, without it, samba4 will not work!
>

Perhaps.  We have a working step that looks like this:

dnscache->sambsdns->dnscache.forwarder.

The initial dnscache instance provides primary DNS to the LAN, deligating
the samba domain zone to samba dns, and as appropriate to the
dnscache.forwarder instance for resolving DNS.

We are throwing around the idea of trying out BIND so we've covered all of
the bases from a testing standpoint, but for our purposed it probably isn't
needed.

It's a pitty the Samba team didn't look at dnscache/tinydns instead of
dnsmasq when they were looking to build a DNS backend for Samba.
 dnscache/tinydns are very solid, lightweight, and simple.   They would
have provided the DNS functions Samba needed with a footprint similar to
dnsmasq.  BIND could have been left completely out of the picture.

-- 
Greg J. Zartman
Board Member

Koozali SME Server

SME Server user and community member since 2000


More information about the samba mailing list