I implemented a domain Samba 4, but I have the following questions: 1) Primary DC (DC 1) Do I need to Install winbind? 2) Secondary DC (DC 2) Do I need to install the NTP server? 3) Ubuntu 14 Workstations What are the packages needed to join the station in the domain? Regards, Márcio
On 2015-08-13 03:55, Marcio Demetrio Bacci wrote:> I implemented a domain Samba 4, but I have the following questions: > > > 1) Primary DC (DC 1) > Do I need to Install winbind?The ADDC has its own winbindd integrated.> 2) Secondary DC (DC 2) > Do I need to install the NTP server?Do you like to be able to log into domain members?> 3) Ubuntu 14 Workstations > What are the packages needed to join the station in the domain?Depends on your needs. If you don't need samba file/printer sharing /from/ the member, I'd recommend using SSSD. It's much more stable and reliable than winbindd. -- Mit freundlichen Grüßen, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 | A - 8020 Graz Mail/XMPP: sven.schwedas at tao.at | +43 (0)680 301 7167 http://software.tao.at -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 648 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20150813/82a7e22b/signature.sig>
On 13/08/15 02:55, Marcio Demetrio Bacci wrote:> I implemented a domain Samba 4, but I have the following questions: > > > 1) Primary DC (DC 1) > Do I need to Install winbind?Install, no, it is already installed by the very fact of being a DC. If you mean do I have to manually use winbind on a DC, only if you want your users to log into the DC directly and this is not recommended.> > > 2) Secondary DC (DC 2) > Do I need to install the NTP server?Have to, no, but it is recommended that you do, what happens if your other DC goes down ?> > > 3) Ubuntu 14 Workstations > What are the packages needed to join the station in the domain?I normally install these: samba samba-vfs-modules samba-common-bin samba-common samba-libs libwbclient0 samba-dsdb-modules libnss-winbind smbclient libpam-winbind libsmbclient winbind krb5-config libpam-krb5 krb5-user ssh-krb5 ntp ldb-tools zip arj mktemp acl attr quota Rowland> > Regards, > > Márcio
On 12-08-2015 22:55, Marcio Demetrio Bacci wrote:> I implemented a domain Samba 4, but I have the following questions: > > 1) Primary DC (DC 1) > Do I need to Install winbind? > > 2) Secondary DC (DC 2) > Do I need to install the NTP server? > > 3) Ubuntu 14 Workstations > What are the packages needed to join the station in the domain?May not be of much help, but a side question: if both server and workstations are linux, why samba? Have you heard about NFS, LDAP? Regards, -- *Marcio Merlone*
On Thu, Aug 13, 2015 at 09:21:23AM +0200, Sven Schwedas wrote:> > Depends on your needs. If you don't need samba file/printer sharing > /from/ the member, I'd recommend using SSSD. It's much more stable and > reliable than winbindd.Can't let comments like this pass. sssd does something slightly different than winbindd, so may or may not be what the person needs. winbindd is extremely reliable and fully supported by the Samba Team, please don't post FUD about Samba components. If you have winbindd problems, post bug reports not FUD. Thanks, Jeremy.
On Thu, 13 Aug 2015, Sven Schwedas wrote:> On 2015-08-13 03:55, Marcio Demetrio Bacci wrote: >> 3) Ubuntu 14 Workstations >> What are the packages needed to join the station in the domain? > > Depends on your needs. If you don't need samba file/printer sharing > /from/ the member, I'd recommend using SSSD. It's much more stable and > reliable than winbindd.Note that even if you use SSSD, you may still want to join the machine to the domain. This way you get automatic working kerberos keys (assuming you set your smb.conf to use the system keytab file). Looks like the package you need for the "net" binary needed to join is "samba-bin-common". If you want to use winbind, you'll also need the "winbind" package. http://packages.ubuntu.com/trusty/amd64/samba-common-bin/filelist http://packages.ubuntu.com/trusty/amd64/winbind/filelist