samba - May 2018 - Q: Samba4 AD DC & small office file sharing

For my current small office configuration, the machine serving
as a NT4 Style PDC is also the main file server.  Works fine.

In reading up on creating an updated configuration, I see The Samba
Wiki states the following:

"The Samba AD DC is able to provide file shares, just like all other 
installation modes. However, the Samba team does not recommend using a 
DC as a file server"

Does this mean that another machine should be added to serve solely
as the DC or am I misreading it.  If it's yet another machine, is
this truly required for a small setup?


---
This email has been checked for viruses by AVG.
https://www.avg.com

Hi Marco,
> For my current small office configuration, the machine serving
> as a NT4 Style PDC is also the main file server.  Works fine.
>
> In reading up on creating an updated configuration, I see The Samba
> Wiki states the following:
>
> "The Samba AD DC is able to provide file shares, just like all other
> installation modes. However, the Samba team does not recommend using a
> DC as a file server"
>
> Does this mean that another machine should be added to serve solely
> as the DC or am I misreading it.  If it's yet another machine, is
> this truly required for a small setup?
the problem is not a performance issue, it is due to different Winbind 
UID/SID mapping mechanism (due to some specificities of SYSVOL share). 
You could have everything on the same machine, but you'll have trouble 
if you need to manage ACLs except for the simplest situation.

Here we always put two different virtual machines for AD and fileserver, 
even for small setup. Virtualisation is cheap, it would be a pity not to 
use it.

Cheers,

Denis

>
>
> ---
> This email has been checked for viruses by AVG.
> https://www.avg.com
>
>
-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil.it

Samba install wiki for Frenchies : https://dev.tranquil.it
WAPT, software deployment made easy : https://wapt.fr

On 05/25/2018 12:54 PM, Marco Shmerykowsky PE via samba
wrote:
> For my current small office configuration, the machine serving
> as a NT4 Style PDC is also the main file server.  Works fine.
> 
> In reading up on creating an updated configuration, I see The Samba
> Wiki states the following:
> 
> "The Samba AD DC is able to provide file shares, just like all other 
> installation modes. However, the Samba team does not recommend using a 
> DC as a file server"
> 
> Does this mean that another machine should be added to serve solely
> as the DC or am I misreading it.  If it's yet another machine, is
> this truly required for a small setup?
For very small offices, I am installing a docker container running the 
Samba AD server and on the host I run a Samba server joined to that AD 
domain. The trick is to add two network interfaces (virtual is ok) to 
the server, run Docker (or equivalent, runc, rkit..etc.) where the 
containers runs tied to one host interface and the other is for the host 
Samba (the domain joined server)
> 
> 
> ---
> This email has been checked for viruses by AVG.
> https://www.avg.com
> 
>