[Samba] Sernet 4.3.X package is no longer free :/

[oeh univie edv lists]

Hi Mathias,

If I'm going to install Samba 4.1.17 on Jessie 8

-) there are no concerns about security, right? (e.g. because some
important security fixes are maintained only in later versions)

-) Do I have to expect difficulties with upgrading when Jessie 9 and
probably newer Samba will appear? I followed the discussion here about
Heimdal problems. That's why I have this question if I'll run in any major
upgrade problems when I want to upgrade from 4.1.x (jessie 8) to 4.x
(jessie 9)?

>The point is "which features do you need?" and "in what version would you
>find all these features?"

-) How to find out about that? Ask here or read change logs? (links
welcome :-) 

"features I need", pretty much those that Mark already wrote he uses
successfully with 4.1.17:
* Windows Authentication" for all office WIN7 workstations
* remote desktop logins (profiles that write back to server)
* DNS, LDAP, Kerberos that comes with Samba (in sernet all that is
included in 4.1. samba I read, so is it in 4.1. samba in debian as well?)
* don't need DHCP
* some basic monitoring for samba, e.g. failed AD logins attempts
* AD management via RSAT from a WIN7 workstation
* 2nd AD DC (so I have two of them in case one has a problem)
* additional file server (member server)
* all machines are debian 8.2
* network printing with CUPS
* quota restricted profiles
* quota restricted home directories
* quote restricted shares

Can I do that with 4.1.17?

-) Can I still use the install guide from
http://www.kania-online.de/fachbuecher/samba-4/ that was written for 4.1
sernet samba or should I use something else because 4.1 sernet samba and
4.1 debian packaged samba differ a lot? 

kind regards, birgit


mathias dufresne <infractory at gmail.com> schreibt:
>Hi Birgit,
>
>The point is "which features do you need?" and "in what version would you
>find all these features?"
>
>If you have all features you want in 4.1.17, just go with it.
>
>Chhers :)
>
>2015-09-22 18:51 GMT+02:00 oeh univie edv lists
><edv-lists at oeh.univie.ac.at>
>:
>
>> Hey,
>>
>> >it´s obvious that not that much people build their own packages
>because
>> they don´t have the necessary experience.
>>
>> that would definitely be me. I struggle enough as a newbie and the idea
>of
>> compiling and error solving afterwards makes me feel VERY uneasy...
>also I
>> wouldn't know how to deal with no automatic updates...
>>
>> Before I read this thread, I wanted to install sernet samba because
>then I
>> could have applied easily what I learned. (That's what I read:
>> http://www.kania-online.de/fachbuecher/samba-4/ )
>>
>> Now I still I have no clue if I have to build from source or if I just
>can
>> install the samba 4.1.17 package that comes with debian jessie. My
>> environment should be as simple as possible, just 2 ADs, 1 file server,
>> one backup machine, user logins, profiles that write back from clients
>to
>> the server, home directories, quota, some shares, some network printers.
>> maybe later on, but only if pressure exists from employees: VPN.
>>
>> So am I on the safe side to just install 4.1.17 or should I consider
>> building from source? Can I have all the features I mentioned? Should I
>be
>> concerned about security because I use 4.1.17 and not the newest
>(sernet)?
>>  If I have to build from source, please mention why, maybe I could
>avoid a
>> feature to not have to compile...
>>
>> This setup is for a non-profit organisation... The decision to change to
>> debian was costly-based (so hard to argue now to buy something except
>the
>> hardware (please don't open another if it's fair or not discussion.
>thank
>> you))....
>>
>> Also sernet 4.3 doesn't seem to be for jessie
>> https://shop.samba.plus/samba-/273/samba-1-jahr ... I could install free
>> sernet 4.2 but then I would have to pay when I need updates....
>>
>> Ah and another question: Can I still use the install guide from
>> http://www.kania-online.de/fachbuecher/samba-4/ that was written for 4.1
>> sernet samba or should I use something else because 4.1 sernet samba and
>> 4.1 debian packaged samba differ a lot?
>>
>> Hope there are other newbies like me that may profit from your answers
>to
>> my stupid questions.... (about the stupid: but I also think access to
>> information should be low-threshold - not just dialogues between
>> developers... to be honest: sometimes I have a hard time understanding
>> what some of you say)
>>
>> birgit
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba