Query regarding samba working as domain controller

[Anoop Singh]

Hi Rowland,

Thanks a lot for the clarification.
I just want to summarize what I understood from your mail.

1. We can use DHCP obtained IP but fixed IP is recommended due to mentioned reason. I meant 127.0.0.1 only. Sorry for the typo. As per your suggestion this must not be used.
2. When Samba is configured as domain controller using tdbsam backend, smbd and winbind in turn started. So we can use "Samba file sharing".
3. When we configure Samba to connect to existing windows domain controller using winbind, smbd is running so we can configure "Samba file sharing" but its not recommended.

I have small confusion over summary 2 and 3. In summary 2, I mean the device on which samba is installed will itself act as domain controller and device will use its own users and groups for authentication while in summary 3 the device will just connect to existing windows active directory and device will be able to use windows users and groups for authentication. Am I right? And also smbd and winbindd both will be running in both configurations along with samba.

Let me know if you see any issue in my understanding.

Thank you once again for your kind mail and clarification.

With regards,
Anoop.


-----Original Message-----
From: samba-technical [mailto:samba-technical-bounces at lists.samba.org] On Behalf Of Rowland Penny
Sent: Wednesday, September 09, 2015 9:42 PM
To: samba-technical at lists.samba.org
Subject: Re: Query regarding samba working as domain controller

On 09/09/15 15:52, Anoop Singh wrote:
> Hi Learned Members,
>
> I have a two small queries regarding samba working as domain controller.
>
> 1.       Do we need to assign static ip in /etc/network/interfaces to configure samba as domain controller? Can't it be dhcp acquired IP? Can we assign 127.0.01 and still it work?

You can run your AD DC with an IP address obtained via DHCP, but it is not recommended, your clients need to find the DC easily and should therefore have a fixed IP. If you mean 127.0.0.1 instead of 127.0.01, please don't even think of using this, it is reserved for 'localhost' , don't use anything starting with '127'

>
> 2.       When samba is configured as domain controller, we run samba instead of smbd. In this case can we achieve samba file share along with domain controller configuration as file share needs smbd to run?

You start the 'samba' daemon, but this in turn starts the 'smbd' daemon and depending on what version of Samba 4 you use, it either uses the 'winbind' built into the 'samba' daemon or (from 4.2.0) it will start the separate 'winbindd' daemon.

>
> When I connect samba to windows active directory, I can achieve samba file share also as in this case smbd runs and not samba.

The 'smbd' daemon is run on all versions of Samba 4, unless you are not running as an AD DC and you choose not to start it. If you are running Samba 4 as an AD DC, you can use it as a fileserver, but this not recommended.

Rowland

> Please provide me the clarification.
>
> Thanks & regards,
> Anoop.
>



-----------------------------------------------------------------------------------------------------------------------------
DISCLAIMER: This electronic message and any attachments to this electronic message is intended for the exclusive use of the addressee(s) named herein and may contain legally privileged and confidential information. It is the property of Celstream Technologies Private Limited. If you are not the intended recipient, you are hereby strictly notified not to copy, forward, distribute or use this message or any attachments thereto. If you have received this message in error, please delete it and all copies thereof, from your system and notify the sender at Celstream Technologies or administrator at celstream.com immediately.
-----------------------------------------------------------------------------------------------------------------------------