Re: [Samba] samba 4 for new authentication domain?

2010-05-01 Thread Andrew Bartlett
On Tue, 2010-04-27 at 00:18 -0400, Morty wrote: The various pages about samba 4 warn about rough edges, upgrade, file services, and print services. I have some domains that have never had a Windows domain that now need Windows AD authentication. I don't need file services and print services,

Re: [Samba] samba 4 for new authentication domain?

2010-05-01 Thread Andrew Bartlett
On Mon, 2010-04-26 at 21:59 -0700, Kevin Keane wrote: Exactly WHY do you need AD instead of NT domains? Without understanding that, I don't think your question can be answered. In some cases, you can use a stand-alone Kerberos and/or LDAP server. Or conversely, some application you use may

Re: [Samba] samba 4 for new authentication domain?

2010-04-27 Thread Morty
On Mon, Apr 26, 2010 at 09:59:02PM -0700, Kevin Keane wrote: Exactly WHY do you need AD instead of NT domains? Without understanding that, I don't think your question can be answered. In some cases, you can use a stand-alone Kerberos and/or LDAP server. Or conversely, some application you use

Re: [Samba] samba 4 for new authentication domain?

2010-04-27 Thread David Harrison
On Tue, Apr 27, 2010 at 6:30 PM, Morty morty+sa...@frakir.orgmorty%2bsa...@frakir.org wrote: On Mon, Apr 26, 2010 at 09:59:02PM -0700, Kevin Keane wrote: Exactly WHY do you need AD instead of NT domains? Without understanding that, I don't think your question can be answered. I have some

Re: [Samba] samba 4 for new authentication domain?

2010-04-27 Thread Morty
On Tue, Apr 27, 2010 at 07:36:39PM +1200, David Harrison wrote: You should clarify what mechanisms those web apps use for authentication. I don't know. :) The apps are black-box COTS apps which use AD for authentication. I didn't pick them, and don't have much insight into them. More apps

Re: [Samba] samba 4 for new authentication domain?

2010-04-27 Thread Kevin Keane
-Original Message- From: samba-boun...@lists.samba.org [mailto:samba- boun...@lists.samba.org] On Behalf Of Morty Sent: Tuesday, April 27, 2010 1:08 AM To: samba@lists.samba.org Subject: Re: [Samba] samba 4 for new authentication domain? On Tue, Apr 27, 2010 at 07:36:39PM +1200

Re: [Samba] samba 4 for new authentication domain?

2010-04-27 Thread Andreas Moroder
What I found works exceedingly well (although not flawlessly) is a Windows AD Domain Controller, and then Samba servers for file and print sharing. Hello Kevin, but what if you already have 1000 users in a samba domain. Is there a way to migrate them to a MS AD without loosing the uidNumber,

Re: [Samba] samba 4 for new authentication domain?

2010-04-27 Thread Morty
On Tue, Apr 27, 2010 at 01:27:35AM -0700, Kevin Keane wrote: You can usually find out simply by reading the documentation on how to set up authentication. Just as David said, almost all of them would use LDAP. The only exception is anything that supports Single-Sign-On via Internet Exploder.

[Samba] samba 4 for new authentication domain?

2010-04-26 Thread Morty
The various pages about samba 4 warn about rough edges, upgrade, file services, and print services. I have some domains that have never had a Windows domain that now need Windows AD authentication. I don't need file services and print services, and upgrade is not a problem. Is samba 4 ready for

Re: [Samba] samba 4 for new authentication domain?

2010-04-26 Thread Kevin Keane
. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba- boun...@lists.samba.org] On Behalf Of Morty Sent: Monday, April 26, 2010 9:19 PM To: samba@lists.samba.org Subject: [Samba] samba 4 for new authentication domain? The various pages about samba 4 warn about rough edges