[Samba] Implementing Samba4

[Daniel Müller]

On Wed, 1 Sep 2010 12:00:29 +0200, Michael Wood <esiotrot at gmail.com>
wrote:
> Hi
> 
> 2010/9/1 Juan Asensio Sánchez <okelet at gmail.com>:
>> El 1 de septiembre de 2010 09:54, Daniel Müller
>> <mueller at tropenklinik.de>escribió:
>>
>>> On Wed, 1 Sep 2010 09:42:45 +0200, Juan Asensio Sánchez
>>> <okelet at gmail.com>
>>> wrote:
>>> > Hi
>>> >
>>> > I am trying to install Samba 4 on a Ubuntu 10.04 Server machine. I
>>> > have
>>> > downloaded the sources, compiled it and installed. Now I have to do
>>> > the
>>> > provision step. I want to use an existing LDAP server (389 Directory
>>> > Server)
> 
> I believe Samba4 currently does not work correctly with an external LDAP
> server.
> 
>>> > installed in other machine (well, really a lot of machines, yet
>>> configured
>>> > for replication). Also, the servers only accept SSL connections. But
>>> > all
>>> > the
>>> Why do not just use the samba 4 internal ldap-server?? And just net
rpc
>>> vampire the users and groups from
> 
> I doubt "net rpc vampire" will do anything except give you an error
> message :)  I believe the "rpc" vs. "ads" etc. options are considered
> to have been a mistake, so are not supported by Samba4's net command.
> Also, there is no support currently for vampiring from Samba3 to
> Samba4.  Someone is working on a migration script, though.  Check the
How about: 2 Samba4-DCs with OpenLDAP 2.4.8 in Multi-Master-Replication
at: http://lists.samba.org/archive/samba-technical/2008-April/058567.html



> samba-technical archives.
> 
>>> the sanba3/Ldap?? I think with samba 4 the old way samba3/ldap just
>>> makes
>>> no sense at all. What should be the advantage of
>>> the old way??
>>> Greetings Daniel
>>>
>> We have more than 60 LDAP servers already workin, with custom schemas,
>> and
>> lot of users and groups, so I think the migration is not trivial. Also,
>> our
>> LDAP servers are not used only for Samba, and I think 389 DS is more
>> appropiate for high load environments.
> 
> I've Cc'd the samba-technical list, someone there might have useful
> comments.
> 
> -- 
> Michael Wood <esiotrot at gmail.com>