cep welly
2004-Jul-16 08:10 UTC
[Samba] Make Samba 3.0.4 PDC server as Windows update server
hi, guys... I'm a noobie around here and.... first come first ask ;-) well, I have successfully made my linux box ( debian sid kernel 2.426 ) as a PDC ( I can connect my winxp box to this pdc --> that's what i mean success ).... I'm using Samba 3.0.4. I wonder if I can make my pdc to be a windows update server. As we know, updating windows always goes through the internet, which in my consideration is not good internet bandwidth management ( assume if there's a hundred or even thousand windows clients in a network ... ) So, if one machine can provide that need, it would be a great improvement. I've heard about SUS which can provide this, but since it need a windows server I guess I should ignore that ( I'd experienced a bad time when one of our server being compromised several months ago --- that's why I turn to Linux platform ) Maybe providing a script to execute the update files is not enough, since users have to involved to the installation, answering some questions, etc which might be boring them ( in case there'll not just only one update ). And there will be a chance where users will give a wrong answer. Updating windows without asking anything, after user log in just : go copying files, changin' registry, etc ( restart after the whole process defenetely can't be avoided, isn't it ? :D ) Or I just to much to hope ..... cheers, --me-- -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.2.4 (GNU/Linux) mQGiBEDato0RBADHD8bKvVCTORppg/pot1Zuyx4Joz/IC34aZlLkG7/JNEVemqiB jSVgnwxa9UNs9Chz9CT6vqzw1pgPXDAb1rD91kbupatgaFUlNEwAW/v2eH8LQEYz 3NicbaysYeeJLBOYlwtmbZWrV8KKoSNrHWxZRjfl4a7TGggllou6+sAQTwCg/2Q2 lLLdPjuaXGiRHqpHFuFWVT8D/Rfzi89GrGWwharBmqNlq3WNJJSK4NdZUy6yFrfY mqaytOBUq6wWoM9OdvAciS4R1qVK2GItV2xIX9N47zeEXspsANF3PyH6PSdXBYfO CDL6jdkL1JS/E+QQcOsqbwkJOa3IpSuJPuE0IuYj9G2pEUNFR9/QiNVq2ysqUK8I V/8VBACmL758SPyrMSwA2sPGiRbSndr0Bc6XW/YPwvJNQsU+zzX+qtAP4K3oEX7R z1OD6LfkJAvrCLswNJbyIlrsFSo/NxlsqnWgKU4K4qsntvMA2UiyAUCOONCn+7Uo V8UVK/3ZKRAlnTM6YdxEWe1c09pP3k4kxGdii5E3cJu6a1a4jbYAAAAxZGViaWFu IChKVVNUIFNJR05BVFVSRSkgPGRlYl9taWxpc3RAeWFob28uY29tLnNnPohbBBMR AgAbBQJA2raNBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEP6KKTciHvMpKQgAoLl1 8lYWPDqcTtRwNyPBA5UhlbHIAKDAjaZYyTgyYU2xtacqPDqsMzf/N4hJBBMRAgAJ BQJA5AJfAgcAAAoJEAiiw5gMTBnLYAUAoKeNbaExa+6oJIz9WWYgsVUO8KW9AJ4m oP4njy83Cl7bnbacBW7o9doj6rkBDQRA2raQEAQAqzfMQUbVLt/iFTDFcI3XSO26 v2BYQAvHdRkMGo8AFrffJCbEFfTlyCrTbhIHKB0D6Z8+lEqdsjJlwleNWDWTu3gY hOvUeGqCiNmPRGeYjM5VatsUNMQLS6qGVbpaiHXZ75e6Vco3MjMEKN1KQDn3QdtW JcW32LPA5XqrEbInV1MAAwYD/idygDdnBgOUNEfN+JVFr3OUuVBTxky6VZ08mYbj VmE/tFDh+H9o0GdHAMrvXbITFau6BR3ykNXtVPRMlT+g1pCe91RovR+WwfLItFnC eB6lfiu4tsdPWeBWPKbdQO7zb1Wj6U/yo5JcjNjQjBHpxuoTpicYYgKiFIIhHzIG kt9MiEYEGBECAAYFAkDatpAACgkQ/oopNyIe8ykmwgCfZLcfyNlAVIpfhyhjJPDb LYJsBc8AnRz9PqrchdlrWSonVBgsHg0VZml+ =sm88 -----END PGP PUBLIC KEY BLOCK-----
Mark Lidstone
2004-Jul-16 08:22 UTC
[Samba] Make Samba 3.0.4 PDC server as Windows update server
Hi, Microsoft provide the software to do it on a Windows server, it's called SUS (System Update Services or something similar). It's basically a certain layout of files and things on a web server. I'm sure someone could do it but it's not really part of what Samba is about (SMB/CIFS). I hope this helps, Mark Lidstone IT and Network Support Administrator BMT SeaTech Ltd Grove House, Meridians Cross, 7 Ocean Way Ocean Village, Southampton. SO14 3TJ. UK Tel: +44 (0)23 8063 5122 Fax: +44 (0)23 8063 5144 E-Mail: mailto:mark.lidstone@bmtseatech.co.uk Website: www.bmtseatech.co.uk ========================================================================Confidentiality Notice and Disclaimer: The contents of this e-mail and any attachments are intended only for the use of the e-mail addressee(s) shown. If you are not that person, or one of those persons, you are not allowed to take any action based upon it or to copy it, forward, distribute or disclose the contents of it and you should please delete it from your system. BMT SeaTech Limited does not accept liability for any errors or omissions in the context of this e-mail or its attachments which arise as a result of Internet transmission, nor accept liability for statements which are those of the author and not clearly made on behalf of BMT SeaTech Limited. ======================================================================== -----Original Message----- From: cep welly [mailto:deb_milist@yahoo.com.sg] Sent: 16 July 2004 09:19 To: Samba Subject: [Samba] Make Samba 3.0.4 PDC server as Windows update server hi, guys... I'm a noobie around here and.... first come first ask ;-) well, I have successfully made my linux box ( debian sid kernel 2.426 ) as a PDC ( I can connect my winxp box to this pdc --> that's what i mean success ).... I'm using Samba 3.0.4. I wonder if I can make my pdc to be a windows update server. As we know, updating windows always goes through the internet, which in my consideration is not good internet bandwidth management ( assume if there's a hundred or even thousand windows clients in a network ... ) So, if one machine can provide that need, it would be a great improvement. I've heard about SUS which can provide this, but since it need a windows server I guess I should ignore that ( I'd experienced a bad time when one of our server being compromised several months ago --- that's why I turn to Linux platform ) Maybe providing a script to execute the update files is not enough, since users have to involved to the installation, answering some questions, etc which might be boring them ( in case there'll not just only one update ). And there will be a chance where users will give a wrong answer. Updating windows without asking anything, after user log in just : go copying files, changin' registry, etc ( restart after the whole process defenetely can't be avoided, isn't it ? :D ) Or I just to much to hope ..... cheers, --me-- -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.2.4 (GNU/Linux) mQGiBEDato0RBADHD8bKvVCTORppg/pot1Zuyx4Joz/IC34aZlLkG7/JNEVemqiB jSVgnwxa9UNs9Chz9CT6vqzw1pgPXDAb1rD91kbupatgaFUlNEwAW/v2eH8LQEYz 3NicbaysYeeJLBOYlwtmbZWrV8KKoSNrHWxZRjfl4a7TGggllou6+sAQTwCg/2Q2 lLLdPjuaXGiRHqpHFuFWVT8D/Rfzi89GrGWwharBmqNlq3WNJJSK4NdZUy6yFrfY mqaytOBUq6wWoM9OdvAciS4R1qVK2GItV2xIX9N47zeEXspsANF3PyH6PSdXBYfO CDL6jdkL1JS/E+QQcOsqbwkJOa3IpSuJPuE0IuYj9G2pEUNFR9/QiNVq2ysqUK8I V/8VBACmL758SPyrMSwA2sPGiRbSndr0Bc6XW/YPwvJNQsU+zzX+qtAP4K3oEX7R z1OD6LfkJAvrCLswNJbyIlrsFSo/NxlsqnWgKU4K4qsntvMA2UiyAUCOONCn+7Uo V8UVK/3ZKRAlnTM6YdxEWe1c09pP3k4kxGdii5E3cJu6a1a4jbYAAAAxZGViaWFu IChKVVNUIFNJR05BVFVSRSkgPGRlYl9taWxpc3RAeWFob28uY29tLnNnPohbBBMR AgAbBQJA2raNBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEP6KKTciHvMpKQgAoLl1 8lYWPDqcTtRwNyPBA5UhlbHIAKDAjaZYyTgyYU2xtacqPDqsMzf/N4hJBBMRAgAJ BQJA5AJfAgcAAAoJEAiiw5gMTBnLYAUAoKeNbaExa+6oJIz9WWYgsVUO8KW9AJ4m oP4njy83Cl7bnbacBW7o9doj6rkBDQRA2raQEAQAqzfMQUbVLt/iFTDFcI3XSO26 v2BYQAvHdRkMGo8AFrffJCbEFfTlyCrTbhIHKB0D6Z8+lEqdsjJlwleNWDWTu3gY hOvUeGqCiNmPRGeYjM5VatsUNMQLS6qGVbpaiHXZ75e6Vco3MjMEKN1KQDn3QdtW JcW32LPA5XqrEbInV1MAAwYD/idygDdnBgOUNEfN+JVFr3OUuVBTxky6VZ08mYbj VmE/tFDh+H9o0GdHAMrvXbITFau6BR3ykNXtVPRMlT+g1pCe91RovR+WwfLItFnC eB6lfiu4tsdPWeBWPKbdQO7zb1Wj6U/yo5JcjNjQjBHpxuoTpicYYgKiFIIhHzIG kt9MiEYEGBECAAYFAkDatpAACgkQ/oopNyIe8ykmwgCfZLcfyNlAVIpfhyhjJPDb LYJsBc8AnRz9PqrchdlrWSonVBgsHg0VZml+ =sm88 -----END PGP PUBLIC KEY BLOCK----- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
rruegner
2004-Jul-16 09:59 UTC
[Samba] Make Samba 3.0.4 PDC server as Windows update server
Hi , you can make any win2k, winxp prof workstation make a sus server , you only have to fix a few parameters ( lines )in the downloaded sus package vom ms ( the line which check the install to the version of windows cause normaly you can only install it on server versions ) Then you install iis ( ms-webserver ) from your win cd (included on win2k, winxp), install the modified package , setup the sus server ( language, download rotation time ) download your updates , aprove them. Make a ntconfig.pol in your netlogon at smb pdc, and configure daily internal check to the ip of the sus server. You can also outroll a tool forcesus.exe and start it with psexec on every domain computer to force the sus update anytime. The only problem is the win sus station has to be up the whole time. ( or at last the update time ) A duron/celeron 800 or so with 128MB Ram will do the job nicly. There are a few other possiblities ( some with linux via wget and so on ), but this is i found the best way. YOu will found all information about that at http://www.susserver.com/ in the forums. It is no hard job to do and works 100 % Regards Robert cep welly schrieb:> hi, guys... I'm a noobie around here and.... first come first ask ;-) > well, I have successfully made my linux box ( debian sid kernel 2.426 ) > as a PDC > ( I can connect my winxp box to this pdc --> that's what i mean success > ).... > I'm using Samba 3.0.4. I wonder if I can make my pdc to be a windows > update server. > As we know, updating windows always goes through the internet, which in my > consideration is not good internet bandwidth management ( assume if there's > a hundred or even thousand windows clients in a network ... ) > So, if one machine can provide that need, it would be a great improvement. > I've heard about SUS which can provide this, but since it need a windows > server > I guess I should ignore that ( I'd experienced a bad time when one of > our server > being compromised several months ago --- that's why I turn to Linux > platform ) > Maybe providing a script to execute the update files is not enough, > since users > have to involved to the installation, answering some questions, etc which > might be boring them ( in case there'll not just only one update ). And > there will > be a chance where users will give a wrong answer. > Updating windows without asking anything, after user log in just : go > copying files, > changin' registry, etc ( restart after the whole process defenetely > can't be avoided, > isn't it ? :D ) > Or I just to much to hope ..... > > cheers, > > --me-- >
Kit Gerrits
2004-Jul-26 10:53 UTC
[Samba] Make Samba 3.0.4 PDC server as Windows update server
Just one little trick that might provide a piece of the puzzle: There is a Windows tool, called hfnetchk (should be in the resource kit), that checks the system for installed patches. Note MS03-030 819696 Warning MS04-011 835732 PATCH NOT FOUND MS99-99 999999 Note means that there is new information on the patch Warning (usually) means that the patch has been re-released You can guess what PATCH NOT FOUND means... After the message comes the patch number and the associated MS Q-number Filtering can be done with the NT command find (replacement for grep) Ex: @echo off echo running update check... hfnetchk.exe > exchange.log type exchange.log | find "Patch NOT Found" >note.log for /F "tokens=3 delims= " %a in (note.log) DO @echo %a /Ex An administrator would have to keep all patches in a repository. Patches can then be downloaded by either MS patchnumber or Q_number -----Oorspronkelijk bericht----- Van: cep welly [mailto:deb_milist@yahoo.com.sg] Verzonden: zaterdag 17 juli 2004 3:05 Aan: Samba Onderwerp: Re: [Samba] Make Samba 3.0.4 PDC server as Windows update server rruegner wrote:> Hi , > you can make any win2k, winxp prof workstation make a > sus server , you only have to fix a few parameters ( lines )in the > downloaded > sus package vom ms ( the line which check the install to the version > of windows cause normaly you can only install it on server versions ) > Then you install iis ( ms-webserver ) from your win cd (included on > win2k, winxp), > install the modified package , setup the sus server ( language, > download rotation time ) download your updates , aprove them. > Make a ntconfig.pol in your netlogon at smb pdc, and > configure daily internal check to the ip of the sus server. > You can also outroll a tool forcesus.exe and start it > with psexec on every domain computer to force the sus update anytime. > The only problem is the win sus station has to be up the whole time. (> or at last the update time )That' might be a problem. Is windows designed to be up for a long time ( without reboot or blue screen ? --- ;-) )> A duron/celeron 800 or so with 128MB Ram will do the job nicly. > There are a few other possiblities ( some with linux via wget and so > on ), but this is i found the best way. > YOu will found all information about that at > http://www.susserver.com/ in the forums.Thanks for your valuable information. I haven't got enough time to google for additional info, but I think deploying susserver behind proxy firewall won't be a problem ( isn't it ??? ) Cheers all ...> It is no hard job to do and works 100 % > Regards Robert > > cep welly schrieb: > >> hi, guys... I'm a noobie around here and.... first come first ask;-)>> well, I have successfully made my linux box ( debian sid kernel 2.426>> ) as a PDC >> ( I can connect my winxp box to this pdc --> that's what i mean >> success ).... >> I'm using Samba 3.0.4. I wonder if I can make my pdc to be a windows >> update server. >> As we know, updating windows always goes through the internet, which >> in my >> consideration is not good internet bandwidth management ( assume if >> there's >> a hundred or even thousand windows clients in a network ... ) >> So, if one machine can provide that need, it would be a great >> improvement. >> I've heard about SUS which can provide this, but since it need a >> windows server >> I guess I should ignore that ( I'd experienced a bad time when one of>> our server >> being compromised several months ago --- that's why I turn to Linux >> platform ) >> Maybe providing a script to execute the update files is not enough, >> since users >> have to involved to the installation, answering some questions, etc >> which >> might be boring them ( in case there'll not just only one update ). >> And there will >> be a chance where users will give a wrong answer. >> Updating windows without asking anything, after user log in just : go>> copying files, >> changin' registry, etc ( restart after the whole process defenetely >> can't be avoided, >> isn't it ? :D ) >> Or I just to much to hope ..... >> >> cheers, >> >> --me-- >> >-- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.2.4 (GNU/Linux) mQGiBEDato0RBADHD8bKvVCTORppg/pot1Zuyx4Joz/IC34aZlLkG7/JNEVemqiB jSVgnwxa9UNs9Chz9CT6vqzw1pgPXDAb1rD91kbupatgaFUlNEwAW/v2eH8LQEYz 3NicbaysYeeJLBOYlwtmbZWrV8KKoSNrHWxZRjfl4a7TGggllou6+sAQTwCg/2Q2 lLLdPjuaXGiRHqpHFuFWVT8D/Rfzi89GrGWwharBmqNlq3WNJJSK4NdZUy6yFrfY mqaytOBUq6wWoM9OdvAciS4R1qVK2GItV2xIX9N47zeEXspsANF3PyH6PSdXBYfO CDL6jdkL1JS/E+QQcOsqbwkJOa3IpSuJPuE0IuYj9G2pEUNFR9/QiNVq2ysqUK8I V/8VBACmL758SPyrMSwA2sPGiRbSndr0Bc6XW/YPwvJNQsU+zzX+qtAP4K3oEX7R z1OD6LfkJAvrCLswNJbyIlrsFSo/NxlsqnWgKU4K4qsntvMA2UiyAUCOONCn+7Uo V8UVK/3ZKRAlnTM6YdxEWe1c09pP3k4kxGdii5E3cJu6a1a4jbYAAAAxZGViaWFu IChKVVNUIFNJR05BVFVSRSkgPGRlYl9taWxpc3RAeWFob28uY29tLnNnPohbBBMR AgAbBQJA2raNBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEP6KKTciHvMpKQgAoLl1 8lYWPDqcTtRwNyPBA5UhlbHIAKDAjaZYyTgyYU2xtacqPDqsMzf/N4hJBBMRAgAJ BQJA5AJfAgcAAAoJEAiiw5gMTBnLYAUAoKeNbaExa+6oJIz9WWYgsVUO8KW9AJ4m oP4njy83Cl7bnbacBW7o9doj6rkBDQRA2raQEAQAqzfMQUbVLt/iFTDFcI3XSO26 v2BYQAvHdRkMGo8AFrffJCbEFfTlyCrTbhIHKB0D6Z8+lEqdsjJlwleNWDWTu3gY hOvUeGqCiNmPRGeYjM5VatsUNMQLS6qGVbpaiHXZ75e6Vco3MjMEKN1KQDn3QdtW JcW32LPA5XqrEbInV1MAAwYD/idygDdnBgOUNEfN+JVFr3OUuVBTxky6VZ08mYbj VmE/tFDh+H9o0GdHAMrvXbITFau6BR3ykNXtVPRMlT+g1pCe91RovR+WwfLItFnC eB6lfiu4tsdPWeBWPKbdQO7zb1Wj6U/yo5JcjNjQjBHpxuoTpicYYgKiFIIhHzIG kt9MiEYEGBECAAYFAkDatpAACgkQ/oopNyIe8ykmwgCfZLcfyNlAVIpfhyhjJPDb LYJsBc8AnRz9PqrchdlrWSonVBgsHg0VZml+ =sm88 -----END PGP PUBLIC KEY BLOCK-----