Existing Samba4 Domain and OpenChange

[Scott Jordahl]

Thanks Andrew.

OK, I need to study this some more. For security and performance issues, 
I want the OpenChange server to be on it's own. Off hand I interpret 
this as meaning I need (2) Samba4 servers running. If I can get 
OpenChange incorporated into my existing Samba4 instance and still have 
parts of OpenChange and SOGo running on the second server, then that 
would be perfect. But, I'm not sure it can be unbolted that way. I'll 
post my results once I have a change to put together a test environment. 
I'll play around with a couple of different configurations.

-- Scott

On 08/29/2012 04:52 PM, Andrew Bartlett wrote:
> On Wed, 2012-08-29 at 16:23 -0700, Scott Jordahl wrote:
>> I'm looking to add SOGo/OpenChange to an existing Samba4 domain
>> environment and confused on how to configure it. I'm going to be testing
>> OpenChange installed on it's own VM. The OpenChange documentation
>> explains how to provision/configure Samba4 as a new domain, but no where
>> does it discuss what to do when an existing Samba4 domain already
>> exists. Do I treat the OpenChange samba4 server as a DC? And if so, do I
>> add the OpenChange parameters to my main Samba4 domain server smb.conf
>> file as well? Or, do I just create a completely separate domain on the
>> OpenChange server for it to use locally? If so, I'll of course lose
>> single sign-on capability. I'll ask this question of the OpenChange team
>> also, but thought the answer may come from this group.
> It would need to bolt on to the existing domain.  You really should work
> out the remaining details with OpenChange, but my guess is that you
> would follow the OpenChange instructions, including rebuilding Samba per
> their rules, but would not run provision, instead ensure it builds into
> the same path as your existing install.
>
> http://tracker.openchange.org/projects/1/wiki/HowTo_Install_OpenChange_From_Source
>
> http://tracker.openchange.org/projects/1/wiki/HowTo_Setup_OpenChange_Server#Add-a-Samba4-user
>
> Some of the instructions in that wiki are confusing, make sure to use:
>
> dcerpc endpoint services = +mapiproxy
>
> Andrew Bartlett
>