[Samba] Samba 4 on Production

[German Molano]

El 23/07/12 10:46, Horacio Lo Brutto escribió:
> Yes, in fact that was one of the things I haven't mentioned. We're 
> going with either to physical servers (nice ones) or with Blades + 
> VMWare ESXi. We will build a redundant pair of servers.
>
> I am a little concerned about the amount of users / machines, and 
> therefore GPOs that would need to be configured / applied in order to 
> support such network.
The only consideration of GPO scalability is that GPOs are shared 
objects on a folder, so you have to secure the availability to the 
workstations.
>
> I am interested in more details regarding the ACL issues you have. 
> What kind of issues you see?
The default Linux mount options could not support store windows file ACL 
attributes. There are recomended file systems for that task like XFS.
>
> Regarding the linux permissions / file system. are you working with 
> Samba as the file server as well ? (the files resides on a linux box?, 
> that's what I mean)
Syncing the groups that you create inside Active Directory with the ACL 
stored would be easy or sometimes a tricky task. You could search the 
forum about this.
>
> Thanks a lot!
>
> On Mon, Jul 23, 2012 at 12:35 PM, German Molano <gmolano at ignios.net 
> <mailto:gmolano at ignios.net>> wrote:
>
>     Horacio
>
>     I had a Samba4 (4.0.0beta2-GIT) installation in production, with
>     40 something workstations with WinXP, Vista y 7  and a couple
>     servers with windows 2008 and 2003 server. To this time it had
>     worked pretty fine, i only have some issues related with ACL, some
>     of them more related with mixed permissions on Linux filesystem.
>     We use GPO to control some windows features at workstation level
>     and the WSUS policies it works as expected. On your enviroment i
>     think that should consider some kind redundancy, maybe a slave DC.
>
>     German Molano
>
>     El 23/07/12 10:13, Horacio Lo Brutto escribió:
>
>         We're involved in a project that the requirements could be
>         satisfied
>         with both samba3 and 4. Anyway I am testing what can be done with
>         Samba4 and after following the tutorial published in the official
>         wiki, I was able to create my test domain, and join WinXP and Win7
>         machines to it without a problem.
>
>         I still need to test the GPO functionality, and some other
>         stuff, but
>         before continuing with that testing, I would like to as you,
>         what do
>         you thing about using samba4 in a network with about 700 computers
>         (mixed between WinXP, Vista, 7 and 2000) and about the same
>         amount of
>         users.
>
>         Will it be stable enough? can I 'trust' samba for such network?
>
>         Thanks a lot in advance!
>
>         --
>
>         Horacio Agustin Lo Brutto
>         horaciol at issecurity.com.ar <mailto:horaciol at issecurity.com.ar>
>         Rondeau 2575 | Distrito Tecnológico | C.A.B.A – Argentina
>         Móvil: 54 9 11 6105 3898 | Tel. 54 11 4942 6877
>         www.issecurity.com.ar <http://www.issecurity.com.ar>
>
>
>     -- 
>     To unsubscribe from this list go to the following URL and read the
>     instructions: https://lists.samba.org/mailman/options/samba
>
>
>
>
> -- 
>
> *Descripción: Descripción: Descripción: IS_mail_sign*
>
> *Horacio Agustin Lo Brutto
> *_horaciol at issecurity.com.ar <mailto:guillermov at issecurity.com.ar>_
> Rondeau 2575 | Distrito Tecnológico | C.A.B.A – Argentina
> Móvil: 54 9 11 6105 3898 | Tel. 54 11 4942 6877
> www.issecurity.com.ar <http://www.issecurity.com.ar/>
>
>