[Samba] Azure Sync

[Bernhard Dick]

Hi,

Am 10.07.2020 um 18:26 schrieb Martin Hauptmann via samba:
> 
> [...]
>>> Is the existing username scheme in Office 365 of
>>> lois.griffin at company.com compatible with Samba?
>> That is compatible, you can set/add an UPN-Domain accordingly, if your
>> AD sits in the company.com hierarchy (i.e. ad.company.com).
> 
> 
> OK, a colleague told me, that I should avoid @ in Samba usernames. They
> have a similar setup and he says the Azure-standard naming looking like
> an E-Mail address would lead to huge problems on Samba.
> 
> Happy to hear it is not a problem.
oh i see there might be a misunderstanding here. I would not use an @ 
within the username, as @ usually separates the username and Domain part 
/ UPN Suffix. But you can set company.com as the domain part for the 
user, so for the user his login looks like user.name at company.com, but 
would also work with NT-Style COMPANY\user.name .
For details this entry in the FAQ might be a good starting point:
https://wiki.samba.org/index.php/Active_Directory_Naming_FAQ#My_User_Logins_Does_Not_Match_My_Email
Some (german) explanation can also be found here: 
https://www.msxfaq.de/exchange/admin/upn.htm .

   Best regards
     Bernhard

> 
> 
>>
>>> Do I need a Windows Server to execute AzureADConnect.msi to keep
>>> groups and passwords in sync?
>>>
>>> Is there a samba-tool command or some ldap-command to do the job?
>>>
>>> Which version of Samba is the minimum version I need? (I prefer
>>> debian stable with standard packages if possible)
>>>
>>> The Domain of the new AD will be
>>> cmpn.company.com
>> So the UPN part (see above) will work.
>>
>>    Best regards
>>      Bernhard
>>
> 
> Thank you
> 
> Martin
> 
>>
>>> I've been looking through the last 1,5 years in the Mailinglist
>>> archive and did not find clear answers to that.
>>>
>>> Thank you
>>> Martin
>>>
>>
> 
>