[Samba] Samba 3.0.33, security = domain and Windows 2008 R2

[Robert Freeman-Day]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/04/2010 11:49 AM, Ray Van Dolson wrote:
> On Thu, Nov 04, 2010 at 06:06:03AM -0700, Robert Freeman-Day wrote:
>> Ray,
>>
>> There was indeed an issue with the old RHEL samba packages and 2008r2.
>>
>> There was a bug report issued about it and RHEL released a newer samba
>> package that can talk 2008r2:
>> https://bugzilla.redhat.com/show_bug.cgi?id=561325
>>
>> I wrote a wiki on migrating to the samba3x package that has worked well
>> for our group:
>> https://uisapp2.iu.edu/confluence-prd/x/FgQCBw
>>
>> Updating to the new package will work across all the Domain Controllers.
>>
>> Hope that helps,
>> Robert
> 
> Thanks Robert.  We're also using samba3x on our RHEL5 machines, but
> unfortunately have a great deal of RHEL4 and Solaris 10 machines with
> both package Samba 3.0.x only (though I believe Oracle is planning a
> bump to Samba 3.4.x at some point here in Solaris 10).
> 
> As such, I'm mainly trying to identify the problem so I can file a good
> report with Red Hat's engineering and see if we can't get a fix in
> place for RHEL4's packages.
> 
> I'll review the BZ you linked above as well as a patch mentioned in
> another reply.
> 
> Many thanks,
> Ray

This is funny, Ray.  I also have a wiki page on using SerNet's version
of samba.  I debated if I should have pasted it in my earlier email...I
should have followed my instincts:

https://uisapp2.iu.edu/confluence-prd/x/sILrBg

Hope that helps out on the RHEL 4 front.  Most of our Solaris installs
are either pure krb5 or just standalone, so we never looked at
it...especially in light of the group membership limits, etc.

Robert

- -- 
________

Robert Freeman-Day

https://launchpad.net/~presgas
GPG Public Key:
http://keyserver.ubuntu.com:11371/pks/lookup?op=get&search=0xBA9DF9ED3E4C7D36
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkzTBo8ACgkQup357T5MfTbCCgCghCuhZK6N60CVrSQZaocUoAsv
OtgAnRazLQ5kZdONuoBbeCXKu7Dg07Ls
=+gt/
-----END PGP SIGNATURE-----