El 23/07/12 10:46, Horacio Lo Brutto escribi?:> Yes, in fact that was one of the things I haven't mentioned. We're
> going with either to physical servers (nice ones) or with Blades +
> VMWare ESXi. We will build a redundant pair of servers.
>
> I am a little concerned about the amount of users / machines, and
> therefore GPOs that would need to be configured / applied in order to
> support such network.
The only consideration of GPO scalability is that GPOs are shared
objects on a folder, so you have to secure the availability to the
workstations.>
> I am interested in more details regarding the ACL issues you have.
> What kind of issues you see?
The default Linux mount options could not support store windows file ACL
attributes. There are recomended file systems for that task like
XFS.>
> Regarding the linux permissions / file system. are you working with
> Samba as the file server as well ? (the files resides on a linux box?,
> that's what I mean)
Syncing the groups that you create inside Active Directory with the ACL
stored would be easy or sometimes a tricky task. You could search the
forum about this.>
> Thanks a lot!
>
> On Mon, Jul 23, 2012 at 12:35 PM, German Molano <gmolano at ignios.net
> <mailto:gmolano at ignios.net>> wrote:
>
> Horacio
>
> I had a Samba4 (4.0.0beta2-GIT) installation in production, with
> 40 something workstations with WinXP, Vista y 7 and a couple
> servers with windows 2008 and 2003 server. To this time it had
> worked pretty fine, i only have some issues related with ACL, some
> of them more related with mixed permissions on Linux filesystem.
> We use GPO to control some windows features at workstation level
> and the WSUS policies it works as expected. On your enviroment i
> think that should consider some kind redundancy, maybe a slave DC.
>
> German Molano
>
> El 23/07/12 10:13, Horacio Lo Brutto escribi?:
>
> We're involved in a project that the requirements could be
> satisfied
> with both samba3 and 4. Anyway I am testing what can be done with
> Samba4 and after following the tutorial published in the official
> wiki, I was able to create my test domain, and join WinXP and Win7
> machines to it without a problem.
>
> I still need to test the GPO functionality, and some other
> stuff, but
> before continuing with that testing, I would like to as you,
> what do
> you thing about using samba4 in a network with about 700 computers
> (mixed between WinXP, Vista, 7 and 2000) and about the same
> amount of
> users.
>
> Will it be stable enough? can I 'trust' samba for such
network?
>
> Thanks a lot in advance!
>
> --
>
> Horacio Agustin Lo Brutto
> horaciol at issecurity.com.ar <mailto:horaciol at
issecurity.com.ar>
> Rondeau 2575 | Distrito Tecnol?gico | C.A.B.A ? Argentina
> M?vil: 54 9 11 6105 3898 | Tel. 54 11 4942 6877
> www.issecurity.com.ar <http://www.issecurity.com.ar>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
>
>
> --
>
> *Descripci?n: Descripci?n: Descripci?n: IS_mail_sign*
>
> *Horacio Agustin Lo Brutto
> *_horaciol at issecurity.com.ar <mailto:guillermov at
issecurity.com.ar>_
> Rondeau 2575 | Distrito Tecnol?gico | C.A.B.A ? Argentina
> M?vil: 54 9 11 6105 3898 | Tel. 54 11 4942 6877
> www.issecurity.com.ar <http://www.issecurity.com.ar/>
>
>