[Samba] Windows 8 Pro no domain logon possible

[Marco Ciampa]

On Fri, Sep 21, 2012 at 11:10:56AM +0200, Roland Schwingel wrote:
> Hi Andrew...
> 
> Andrew Bartlett <abartlet at samba.org> wrote on 20.09.2012 19:56:30:
> > > > No, it is not possible to use another LDAP server instead of
> > > > Samba 4's
> > > > built-in LDAP implementation.  At one point there was support for
> > > > this, but as far as I understand it, it is not technically
> > > > possible to
> > >  > make it work properly and the support was removed/deprecated.
> > > This is bad. Is it really expected to migrate over all data which is
> > > most likely present in companies current LDAP solutions to the samba
> > > ldap? Can samba ldap fullfill all needs here (eg. rock solid life
> > > replication and general purpose usage?). I would very much appreciate
> > > the possibility of being able to not use the embedded ldap. This would
> > > very much reduce the effort of moving from samba3 to 4 in
> > > existing ldap environments.
> > We spent considerable effort over a period of years in attempting to
> > make this possible.  It is not.  Even if it was, it would not involve
> > 'simply' reading the companies LDAP server, it would be a very intrusive
> > change no more acceptable than using our own built-in LDAP server.
> Hmmm... I see...
> 
> This will very much complicate migration from samba 3 to 4 if you are
> having an existing infrastructure. We use our LDAP for
> users,groups,dns,dhcp,networks and a lot of other things. So you say
> if one wants to use samba 4 (s)he has to move fully over to the ldap
> of samba4 and abandon the current infrastructure? This is quite a
> burden and will take many months. So it won't happen here in a
> forseable time even samba 4 would be released today as a final
> stable version. I believe I am not the only one having these
> concerns. Don't get me wrong, I would love to get AD support but the
> road from an at present well working (beside of windows 8 yet)
> domain infrastructure for windows hosts and seamless integration of
> linux and Mac OS hosts to samba 4 based AD appears to become very
> long and hard. I hope you will maintain samba 3 for a longer time
> (including windows 8 support).

For what I understand, not making possible to merge 2 LDAPs (enterprise
with smb4 internal) does not imply that it is not possible to integrate
Samba 4 into a large environment. The problem IMHO simply shift from a
merging into a sincronization problem...

-- 


Marco Ciampa

+--------------------+
| Linux User  #78271 |
| FSFE fellow   #364 |
+--------------------+