[Samba] Samba 3.0.33, security = domain and Windows 2008 R2

[Ray Van Dolson]

On Thu, Nov 04, 2010 at 12:16:31PM -0700, Robert Freeman-Day wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 11/04/2010 11:49 AM, Ray Van Dolson wrote:
> > On Thu, Nov 04, 2010 at 06:06:03AM -0700, Robert Freeman-Day wrote:
> >> Ray,
> >>
> >> There was indeed an issue with the old RHEL samba packages and 2008r2.
> >>
> >> There was a bug report issued about it and RHEL released a newer samba
> >> package that can talk 2008r2:
> >> https://bugzilla.redhat.com/show_bug.cgi?id=561325
> >>
> >> I wrote a wiki on migrating to the samba3x package that has worked well
> >> for our group:
> >> https://uisapp2.iu.edu/confluence-prd/x/FgQCBw
> >>
> >> Updating to the new package will work across all the Domain Controllers.
> >>
> >> Hope that helps,
> >> Robert
> > 
> > Thanks Robert.  We're also using samba3x on our RHEL5 machines, but
> > unfortunately have a great deal of RHEL4 and Solaris 10 machines with
> > both package Samba 3.0.x only (though I believe Oracle is planning a
> > bump to Samba 3.4.x at some point here in Solaris 10).
> > 
> > As such, I'm mainly trying to identify the problem so I can file a good
> > report with Red Hat's engineering and see if we can't get a fix in
> > place for RHEL4's packages.
> > 
> > I'll review the BZ you linked above as well as a patch mentioned in
> > another reply.
> > 
> > Many thanks,
> > Ray
> 
> This is funny, Ray.  I also have a wiki page on using SerNet's version
> of samba.  I debated if I should have pasted it in my earlier email...I
> should have followed my instincts:
> 
> https://uisapp2.iu.edu/confluence-prd/x/sILrBg
> 
> Hope that helps out on the RHEL 4 front.  Most of our Solaris installs
> are either pure krb5 or just standalone, so we never looked at
> it...especially in light of the group membership limits, etc.
> 
> Robert

Thanks Robert!  Great resource.

Our Solaris use-case scenario is a bit of a legacy thing -- but a
rock-solid one.  I'm sure you know how that goes.

This may be the catalyst to move away from it.

Ray