We are planning to build an HA cluster of samba servers, using winbind to authenticate against an Active Directory domain. The problem I see with this, is that the Winbind uid mappings will not necessarily be the same on both nodes in the HA cluster. Does anyone have any suggestions on how to get the winbind uid and gid mappings to match on 2 separate servers? Alex Laslavic Havertys Tech Services
alaslavic@havertys.com wrote:> > >We are planning to build an HA cluster of samba servers, using winbind to >authenticate against an Active Directory domain. The problem I see with >this, is that the Winbind uid mappings will not necessarily be the same on >both nodes in the HA cluster. Does anyone have any suggestions on how to >get the winbind uid and gid mappings to match on 2 separate servers? > >Use an LDAP database to store your idmap backend, that's exactly what they created this particular backend for. There's a few posts over this topic covering some parts of setup and various people's issues with it. -- Paul Gienger Office: 701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.com mailto:pgienger@ae-solutions.com
On Thu, Jul 01, 2004 at 09:30:37AM -0400, alaslavic@havertys.com wrote:> We are planning to build an HA cluster of samba servers, using winbind to > authenticate against an Active Directory domain. The problem I see with > this, is that the Winbind uid mappings will not necessarily be the same on > both nodes in the HA cluster. Does anyone have any suggestions on how to > get the winbind uid and gid mappings to match on 2 separate servers?Place /usr/lib/samba (or your directory with *.tdb files) on a shared device and switched together with the rest of ha-resources. By the way, this could cause some problems if your binaries are placed in the same directory as *.tdb databases, as for example SuSE does. Anyway, You has been warned :-) Cheers, mpr. -- Marcin Przyczyna Net & Sys Admin, citiworks AG mpr@citiworks.de +49 89 9925 75356
Hi!
I did it in the Sun box.
Try this document: http://docs-pdf.sun.com/817-1533/817-1533.pdf (very
clever)
Pal
alaslavic@havertys.com
Sent by: samba-bounces+pal.dorogi=answare.hu@lists.samba.org
2004.07.01 15:30
To: samba@lists.samba.org
cc: david.narayan@me.gatech.edu
Subject: [Samba] Samba w/Winbind HA cluster
We are planning to build an HA cluster of samba servers, using winbind to
authenticate against an Active Directory domain. The problem I see with
this, is that the Winbind uid mappings will not necessarily be the same on
both nodes in the HA cluster. Does anyone have any suggestions on how to
get the winbind uid and gid mappings to match on 2 separate servers?
Alex Laslavic
Havertys Tech Services
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba