[Samba] freeradius on dc?

[Joachim Lindenberg]

Hello John,

>I work on a project that is providing OCI container images, example deployments and documentation.
>https://github.com/samba-in-kubernetes/samba-container/
>We have images for (member) file server, AD DC, client, and just recently added a "toolbox" image for testing and diagnostics.

Do you have instructions for a member container including join & leave instructions to an existing domain? Didn´t find that with the link given.

>Please don't let the 'kubernetes' in the org name scare you off the project in question is not K8S specific.  I'd love more feedback and eyes on our project. 

I always mention k8s in my trainings, may be I can also experiment with it now. So far my internet connection is the major hurdle and docker(-compose) was sufficient.

Thanks,
Joachim



> -----Ursprüngliche Nachricht-----
> Von: Andrew Bartlett <abartlet at samba.org>
> Gesendet: Mittwoch, 30. November 2022 00:51
> An: Joachim Lindenberg <samba at lindenberg.one>; samba at lists.samba.org
> Betreff: Re: [Samba] freeradius on dc?
> 
> On Tue, 2022-11-29 at 22:31 +0100, Joachim Lindenberg via samba wrote:
> > Hello,
> > 
> > I am wondering whether it is possible / recommended or not, to install
> > and use freeradius on a domain controller. The documentation at
> > https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Act
> > ive_Directory  is about installation/configuration on member servers
> > only.
> > 
> > Any thoughts? What changes on a dc?
> 
> It should still just work, as the same winbindd is under the hood and this
> mode of operation is connected, but running a member server allows more
> separation of concerns and avoids any DC being 'special'.
> 
> VMs or containers are good for this.
> 
> Andrew Bartlett





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba