[Samba] Samba 4 analyse

Alex Crow acrow at integrafin.co.uk
Thu Jun 7 05:08:19 MDT 2012

>> You can still separate your DC from your file server.  You then join the
>> file server to the domain, and use winbindd (not nss_ldap).
>> WINS need not be connected, but we need to have certain entries in the
>> DNS server, and for dynamic DNS registration (which AD clients will want
>> to do) you will need it to be on the DC.  For these reasons we recommend
>> the bind9 dlz plugin we provide.

I am in the situation you describe - I have separate DCs and file servers.

How do you maintain consistent uid/gid mappings in a Samba4 domain 
without nss_ldap? We also have trusted domains in our setup, and 
mappings are stored in LDAP Idmap ou. Is it possible to continue using 
trusted domains this way?



This message is intended only for the addressee and may contain
confidential information.  Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.

"Transact" is operated by Integrated Financial Arrangements plc
Domain House, 5-7 Singer Street, London  EC2A 4BQ
Tel: (020) 7608 4900 Fax: (020) 7608 5300
(Registered office: as above; Registered in England and Wales under number: 3727592)
Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)

More information about the samba mailing list