[Samba] Best solution for remote sites

[Andrew Bartlett]

On Sun, 2016-05-15 at 09:14 +0200, Sébastien Le Ray wrote:
> Le 14/05/2016 à 12:03, Andrew Bartlett a écrit :
> > On Wed, 2016-05-11 at 14:06 +0200, Sébastien Le Ray wrote:
> > > Hi,
> > > 
> > > I was wondering if there was a possibility for remote sites to
> > > avoid
> > > having a "local" domain controller (Samba 4 AD DC) and still
> > > provide
> > > share access while WAN link is down. Something like the Windows
> > > credential cache on workstation.
> > If the link is only down for moments, than a valid kerberos ticket
> > should be able to get to a share.  But the share needs to be
> > running on
> > a very current version of Samba, and Kerberos must be in use. 
> >  (Even
> > then, this may not work, but I've seen efforts made to try and fix
> > it).
> 
> « Very current » and « debian package » are quite incompatible :)

We package current Samba 4.4 in debian testing.  I agree that someone
needs to do the backports, however sadly while there has been great
work done backporting Samba outside debian's semi-official backports,
nobody with the right experience has stepped up to do it there.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba