samba - Dec 2015 - Functionality of Nmbd at Active Directory mode of Samba4 !

As I know runnig of Nmbd at Acitve Directory mode is quite unofficial now
(but possible) .

I will not ask why it is not reccomded to run Nmbd within Samba4 started at
AD mode.
But if somebody can tell, you are wellcome.

But when nmb code implementation is planned to AD part ?
That is when nmb functionnality adding to Samba4 acting as AD is planned ?
To bring possibiity to use full-forced Neighborhood browsing at AD mode
(with LMB/DMB roles for instance) .

On 01/12/15 13:09, CpServiceSPb . wrote:
> As I know runnig of Nmbd at Acitve Directory mode is quite unofficial now
> (but possible) .
There was some talk about stopping anybody being able to do this.
>
> I will not ask why it is not reccomded to run Nmbd within Samba4 started at
> AD mode.
> But if somebody can tell, you are wellcome.
If you run 'nmbd' with 'samba' i.e. on an AD DC, you are
duplicating the
code in the 'nmb' component of the 'samba' deamon, this is
definitely
not recommended. You could turn off 'nmb', but again this is not 
recommended, the rest of the 'samba' deamon relies on 'nmb' not
the
external 'nmbd'

Or to put it another way, if you are running 'nmbd' with an AD DC, I 
would suggest you stop, sooner or later, you are going to have problems.
> But when nmb code implementation is planned to AD part ?
> That is when nmb functionnality adding to Samba4 acting as AD is planned ?
> To bring possibiity to use full-forced Neighborhood browsing at AD mode
> (with LMB/DMB roles for instance) .
Well probably not any time soon, (unless you are prepared to come up 
with patches), this appears to be one of those things that would be nice 
to have, but not at the top of the list. It also seems to be 
disappearing from windows, so why waste valuable time doing something 
that will possibly no longer be needed.

Rowland

Hi,

I can be wrong but I believe there is no nmbd when Samba is run in AD mode
because as AD is quiet structural in many company it must not fail. To not
fail each company will have to deploy enough infrastructure to avoid
failure. Once you started to deploy all these machines adding several
others machines to serve files do not seems to hard.

Another point is what kind of file sharing:
- If you serve files for Windows clients you may prefer to use winbind to
build system users for that file servers, for the files ACLs match Windows
attributes of users.
- if you serve ffiles for UNIX or Linux machine you don't need Samba, NFS
would do the job. But the users could come from AD, on these file servers
users would be created using SSSD or nslcd to be built using rfc2307
attributes.

On AD DC you need only two shares: sysvol + netlogon. Both are Windows
shares. Both will work perfectly once Winbind is configured on AD DC to
retrieve users from AD. I expect without Winbind configured sometimes Samba
won't be able to check users rights, but I can be wrong.

i could add that Samba is not yet multi-threaded so one task per process
and one task will be able to get 100% CPU on one and only one core at one
moment. To be able to use more physical CPU for the same task on the same
physical machine you could consider to use virtual machines. With virtual
machines you can have several Samba running inside different VMs on the
same physical CPU. So you can have more than only 100% of one CPU core used
for the same task on the same physical computer.

Now VM usage + split of file servers => no need of nmbd on AD DC. Nmbd will
be run on file servers which serve files for Windows computers.

That's just my own point of view, built according to own understanding of
Samba. That means I can be really far from the original "why" : )

Cheers,

mathias

2015-12-01 14:09 GMT+01:00 CpServiceSPb . <cpservicespb at gmail.com>:
> As I know runnig of Nmbd at Acitve Directory mode is quite unofficial now
> (but possible) .
>
> I will not ask why it is not reccomded to run Nmbd within Samba4 started at
> AD mode.
> But if somebody can tell, you are wellcome.
>
> But when nmb code implementation is planned to AD part ?
> That is when nmb functionnality adding to Samba4 acting as AD is planned ?
> To bring possibiity to use full-forced Neighborhood browsing at AD mode
> (with LMB/DMB roles for instance) .
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>