[Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

[steve]

On 01/09/2012 05:18 PM, mikel king wrote:
> On Jan 9, 2012, at 10:48 AM, Adam Tauno Williams wrote:
>
>> On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote:
>>> I am sure this pops up on the list ever once in a while. I have
>>> inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux
>>> and of course because bean counters have to use financial apps that
>>> only run on Windows. My long term goal is to install some sort of
>>> central management system and really feel that AD is not in my best
>>> interest considering that 90% of the 300+ computers are not Windows
>>> based. Unfortunately the 20 or so Windows machines are running mostly
>>> Win7 and there are some 2k8r2 servers in the mix somewhere.
>>> Does anyone know of any good how-to, best practices/guidelines sites or documents?
>>> Thoughts? Suggestions?
>> Well, for the question in subject -
>> "Can Samba + (OpenLDAP&  Kerberos) completely replace ActiveDirectory?"
>>
>> Emphatically - NO.
>>
>> At least if your using Samba3.
>>
>> Use Samba4 and you get Active Directory for free.
>>
>
> Thanks Adam,
>
> I really appreciate the response. I am reading the docs on s4 now. Are there any gotchas that I should be on the look out for?
>
> Cheers,
> Mikel
>
Samba 4 serves win 7 clients out of the box. Join the domain and you're 
done. The biggest gotcha for us was adding Linux clients. Please let us 
know if you find an easy way.
Steve.