samba - Dec 2004 - PDC, BDCs - how do you synchronize roaming profiles?

Hello,

I'm about to deploy Samba PDC and several BDCs.

As far as I understand Samba and domain logons, this means that a user 
will be able to log onto any server, with his workstation choosing a 
domain controller that is probably the closest/fastest etc. one.

As a consequence, this also means, that on each server there has to be a 
copy of a profile of a given user, right?

If so, how can I keep roaming profiles in sync, given the fact that I 
don't know if user will log onto PDC, BDC1, BDC2 etc.?

For example, at 11.00-11.30 user Joe will log in/out PDC in building A, 
and at 12.00-12.30 will log in/out BDC1 in building B, and then at 
13.00-13.30 log in/out BDC2 in building C - how can I assure that that 
user will have that same (roaming) profile?


Or perhaps I don't understand something?


Tomek

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

| Or perhaps I don't understand something?

Just a guess but a BDC is probably going to do the same thing with the
files that the LDAP backend would do.  I.E. replicate the data from the
server.

Jim C.
- --
- -----------------------------------------------------------------
| I can be reached on the following Instant Messenger services: |
|---------------------------------------------------------------|
| MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
|---------------------------------------------------------------|
| Y!: j_c_llings            Jabber: jcllings @ njs.netlab.cz	|
- -----------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFButk657L0B7uXm9oRAm4TAJ9FbHfSVOMwBXgmLNe+2d3/hDP6kwCeONlC
hejNa02+f9eAkCGwyERz15I=csYH
-----END PGP SIGNATURE-----

Tomasz Chmielewski wrote:
> As a consequence, this also means, that on each server there has to be a 
> copy of a profile of a given user, right?
No, not right. The user roaming profile is stored only on one server.

Maybe you may rename the each SAMBA server in each location in the same 
NetBIOS name, but the profile directory on each server is fetched from 
the central server over NFS.

Gints

> Tomasz Chmielewski wrote:
> | Jim C. wrote:
> |
> |> -----BEGIN PGP SIGNED MESSAGE-----
> |> Hash: SHA1
> |>
> |> | Or perhaps I don't understand something?
> |>
> |> Just a guess but a BDC is probably going to do the same thing with
the
> |> files that the LDAP backend would do.  I.E. replicate the data from
the
> |> server.
> | But how should it be done?
> 
> OK, real quick.  I don't have time to read the rest of this email but
> try this:
> 
> http://linsec.ca/bin/view/Main/LdapAdvanced
NO, this article is about LDAP mainly, and says nothing about 
replicating/synchronizing profiles/data/files.


Tomek

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Argh! You are correct. I thought this was the one really good article
that Buchan Milne wrote.  It seems to have disapeared.


|> http://linsec.ca/bin/view/Main/LdapAdvanced
| NO, this article is about LDAP mainly, and says nothing about
| replicating/synchronizing profiles/data/files.
| Tomek


Jim C.
- --
- -----------------------------------------------------------------
| I can be reached on the following Instant Messenger services: |
|---------------------------------------------------------------|
| MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
|---------------------------------------------------------------|
| Y!: j_c_llings            Jabber: jcllings @ njs.netlab.cz	|
- -----------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBvBG657L0B7uXm9oRAkY3AJ9blmu6Q7ZGVCAwpu+jGilObYSeAgCfRyUI
fAJ/IzpMXWVhA7vGa5mZHXU=oi0a
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tomasz Chmielewski wrote:
| Hello,

<Thinking out loud>

hmmm.... Small storeage area network? Gigabit ethernet might be cheap
enough.  Perhaps you could create a Gigabit backbone and basically do a
mirror setup?  Would RAID help?  Have you been thinking of a backup
solution?

Jim C.
- --
- -----------------------------------------------------------------
| I can be reached on the following Instant Messenger services: |
|---------------------------------------------------------------|
| MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
|---------------------------------------------------------------|
| Y!: j_c_llings            Jabber: jcllings @ njs.netlab.cz	|
- -----------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBvSwk57L0B7uXm9oRAiRgAJ9rD4Rgl7fWD8y3Pcn01S+/U0odNQCeLSRM
YSKY74yJ7igVjfFWXMHAlio=qQpg
-----END PGP SIGNATURE-----