samba - Dec 2003 - samba 3.0.1 policies

Hi,

We are considering samba 3.0.1 as a replacement for our old-hag Windows 
NT4.0 Server PDC. However, we do want some policy control, and from the 
samba 3.0.0 documentation (23.3), it says the only current functional 
policy is the password expirey. Is this still true in samba 3.0.1?

Can an NT4.0 server be a backup domain controller to samba 3.0.1 PDC? That 
way we can keep the NT4 machine around and create the NTConfig.POL on that 
machine, and store it on the samba 3 PDC. Is that possible?

Is there any way that samba 3 PDC (NT4/2K/XP clients) can run a script on 
a client either during logon or logoff events? Or is this a policy thing?

Thanks in advance,

Alex
---                                                               ---
   Alex Lazarevich | Systems Administrator | Imaging Technology Group
            Beckman Institute - University of Illinois
       alazarev@itg.uiuc.edu | (217)244-1565 | www.itg.uiuc.edu
---                                                               ---

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alexander Lazarevich wrote:
> Hi,
> 
> We are considering samba 3.0.1 as a replacement for our old-hag Windows 
> NT4.0 Server PDC. However, we do want some policy control, and from the 
> samba 3.0.0 documentation (23.3), it says the only current functional 
> policy is the password expirey. Is this still true in samba 3.0.1?
That's misleading a little.  Storing a policy file (ntconfig.pol) on
the [netlogon] share has been supported for years.  This is client
initiated.
> Can an NT4.0 server be a backup domain controller to samba 3.0.1 PDC? 
Nope, but I don;t think you need that
.
> Is there any way that samba 3 PDC (NT4/2K/XP clients) can run 
 > a script on a client either during logon or logoff events? Or
 > is this a policy thing?

Logon yes (see 'logon script' in smb.conf(5)).  Logoff would have to be
some kind of client tool.



- --
cheers, jerry
  ----------------------------------------------------------------------
  Hewlett-Packard            ------------------------- http://www.hp.com
  SAMBA Team                 ---------------------- http://www.samba.org
  GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
  "If we're adding to the noise, turn off this song" --Switchfoot
(2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/4I+4IR7qMdg1EfYRAn+lAJ9qk0dflFTJhKwFvFFV6NDkC4fwIQCfVA26
Vw706SayNc8qHYFjLm6VVXM=2T27
-----END PGP SIGNATURE-----