samba - Apr 2015 - How do you join a Linux mailserver to a Samba domain?

SOGo/Openchange is not willing i f it is not holding the fsmo roles. And by
the way in an multiple DC replicating environment you can kill your domain
on the fly even with
a real "Exchange-Server" if you are not carefull  enough.
So the only way to make OPenchange live in your domain ist o join it as dc.
And status of development as far as I know this is hard to do.
Or you manage to provision as new domain and write a script per scp to add
users to both domains.


Good Luck
Daniel


EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen 
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de 



-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
Im
Auftrag von Steve Ankeny
Gesendet: Freitag, 24. April 2015 13:40
An: Bob Miller; samba at lists.samba.org
Betreff: Re: [Samba] How do you join a Linux mailserver to a Samba domain?

thx, Bob . . .

The e-mail problems appears to be a permissions and summary file issue.

I gave the users Administrative permissions, and everything worked
perfectly.  Then I compacted the folders and rebuilt the summary files, took
away Administrator permissions, and everything STILL works perfectly.

When I posted the question, I wondered if there was some step in joining the
mailserver I'd missed.

I'm told when Microsoft Exchange is installed, it adds entries to Active
Directory, and I wondered about alternative mailservers.  I see no place in
the ADUC MMC to identify the SOGo/Dovecot mailserver.

The same server functions as the Samba AD DC, and alternatively, I wondered
if I should use a Windows Server as a Domain Controller pointing back to
Samba AD DC  Would that identify my mailserver?

I also don't understand why the ADUC MMC failed to created a "new"
user.

On 04/23/2015 03:38 PM, Bob Miller wrote:
> It's getting quite far out of date, so I dont' publish links to it 
> publicly, but you can find how to configure dovecot for samba4 here:
>
> http://cocnm.computerisms.ca/index.php/Install_Qmail-ldap,_Dovecot,_an
> d_Related_Email_Services#Obtain_and_Install_Dovecot
>
>
> On 15-04-23 12:20 PM, Steve Ankeny wrote:
>> I tried to create a new user in ADUC on Windows (using the AD MMC)
>>
>> and received another error that appears to relate to the issue --
>>
>>
>>
>>
>> I presume it's speaking of storage space in my Samba AD DC but
"df"
>> shows otherwise.
>>
>> Can someone point me to a tutorial?
>>
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

interesting, thx . . .

SOGO/Openchange/Dovecot/Postfix are on the same box as my Samba AD DC

Inverse provides provisioning instructions for using Samba AD DC as the 
source for SOGo/Openchange, and those have been working properly BEFORE 
we joined the Windows 2008 R2 Servers to the domain.

One Windows Server acts as a Remote Desktop Server (Terminal Services) 
and the other as SQL Server.

I wondered if joining the SQL Server as a Domain Controller would help.  
However, I see that I need to look into the FSMO rules and their 
relationship to SOGo/Openchange (and stay away from a second DC)

How can I join the mailserver portion of my Ubuntu Server?  How can I 
identify it in the ADUC schema?

On 04/24/2015 08:03 AM, Daniel M?ller wrote:
> SOGo/Openchange is not willing i f it is not holding the fsmo roles. And by
> the way in an multiple DC replicating environment you can kill your domain
> on the fly even with
> a real "Exchange-Server" if you are not carefull  enough.
> So the only way to make OPenchange live in your domain ist o join it as dc.
> And status of development as far as I know this is hard to do.
> Or you manage to provision as new domain and write a script per scp to add
> users to both domains.
>
>
> Good Luck
> Daniel
>
>
> EDV Daniel M?ller
>
> Leitung EDV
> Tropenklinik Paul-Lechler-Krankenhaus
> Paul-Lechler-Str. 24
> 72076 T?bingen
> Tel.: 07071/206-463, Fax: 07071/206-499
> eMail: mueller at tropenklinik.de
> Internet: www.tropenklinik.de
>
>
>
> -----Urspr?ngliche Nachricht-----
> Von: samba-bounces at lists.samba.org [mailto:samba-bounces at
lists.samba.org] Im
> Auftrag von Steve Ankeny
> Gesendet: Freitag, 24. April 2015 13:40
> An: Bob Miller; samba at lists.samba.org
> Betreff: Re: [Samba] How do you join a Linux mailserver to a Samba domain?
>
> thx, Bob . . .
>
> The e-mail problems appears to be a permissions and summary file issue.
>
> I gave the users Administrative permissions, and everything worked
> perfectly.  Then I compacted the folders and rebuilt the summary files,
took
> away Administrator permissions, and everything STILL works perfectly.
>
> When I posted the question, I wondered if there was some step in joining
the
> mailserver I'd missed.
>
> I'm told when Microsoft Exchange is installed, it adds entries to
Active
> Directory, and I wondered about alternative mailservers.  I see no place in
> the ADUC MMC to identify the SOGo/Dovecot mailserver.
>
> The same server functions as the Samba AD DC, and alternatively, I wondered
> if I should use a Windows Server as a Domain Controller pointing back to
> Samba AD DC  Would that identify my mailserver?
>
> I also don't understand why the ADUC MMC failed to created a
"new" user.
>
> On 04/23/2015 03:38 PM, Bob Miller wrote:
>> It's getting quite far out of date, so I dont' publish links to
it
>> publicly, but you can find how to configure dovecot for samba4 here:
>>
>> http://cocnm.computerisms.ca/index.php/Install_Qmail-ldap,_Dovecot,_an
>> d_Related_Email_Services#Obtain_and_Install_Dovecot
>>
>>
>> On 15-04-23 12:20 PM, Steve Ankeny wrote:
>>> I tried to create a new user in ADUC on Windows (using the AD MMC)
>>>
>>> and received another error that appears to relate to the issue --
>>>
>>>
>>>
>>>
>>> I presume it's speaking of storage space in my Samba AD DC but
"df"
>>> shows otherwise.
>>>
>>> Can someone point me to a tutorial?
>>>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>

It looks like I need the Schema Master and RID Master roles installed on 
my Samba AD DC

How do I get those roles installed and/or how do I expand the Samba AD 
schema?  I'll search the Wiki

On 04/24/2015 08:03 AM, Daniel M?ller wrote:
> SOGo/Openchange is not willing i f it is not holding the fsmo roles. And by
> the way in an multiple DC replicating environment you can kill your domain
> on the fly even with
> a real "Exchange-Server" if you are not carefull  enough.
> So the only way to make OPenchange live in your domain ist o join it as dc.
> And status of development as far as I know this is hard to do.
> Or you manage to provision as new domain and write a script per scp to add
> users to both domains.
>
>
> Good Luck
> Daniel
>
>
> EDV Daniel M?ller
>
> Leitung EDV
> Tropenklinik Paul-Lechler-Krankenhaus
> Paul-Lechler-Str. 24
> 72076 T?bingen
> Tel.: 07071/206-463, Fax: 07071/206-499
> eMail: mueller at tropenklinik.de
> Internet: www.tropenklinik.de
>
>
>
> -----Urspr?ngliche Nachricht-----
> Von: samba-bounces at lists.samba.org [mailto:samba-bounces at
lists.samba.org] Im
> Auftrag von Steve Ankeny
> Gesendet: Freitag, 24. April 2015 13:40
> An: Bob Miller; samba at lists.samba.org
> Betreff: Re: [Samba] How do you join a Linux mailserver to a Samba domain?
>
> thx, Bob . . .
>
> The e-mail problems appears to be a permissions and summary file issue.
>
> I gave the users Administrative permissions, and everything worked
> perfectly.  Then I compacted the folders and rebuilt the summary files,
took
> away Administrator permissions, and everything STILL works perfectly.
>
> When I posted the question, I wondered if there was some step in joining
the
> mailserver I'd missed.
>
> I'm told when Microsoft Exchange is installed, it adds entries to
Active
> Directory, and I wondered about alternative mailservers.  I see no place in
> the ADUC MMC to identify the SOGo/Dovecot mailserver.
>
> The same server functions as the Samba AD DC, and alternatively, I wondered
> if I should use a Windows Server as a Domain Controller pointing back to
> Samba AD DC  Would that identify my mailserver?
>
> I also don't understand why the ADUC MMC failed to created a
"new" user.
>
> On 04/23/2015 03:38 PM, Bob Miller wrote:
>> It's getting quite far out of date, so I dont' publish links to
it
>> publicly, but you can find how to configure dovecot for samba4 here:
>>
>> http://cocnm.computerisms.ca/index.php/Install_Qmail-ldap,_Dovecot,_an
>> d_Related_Email_Services#Obtain_and_Install_Dovecot
>>
>>
>> On 15-04-23 12:20 PM, Steve Ankeny wrote:
>>> I tried to create a new user in ADUC on Windows (using the AD MMC)
>>>
>>> and received another error that appears to relate to the issue --
>>>
>>>
>>>
>>>
>>> I presume it's speaking of storage space in my Samba AD DC but
"df"
>>> shows otherwise.
>>>
>>> Can someone point me to a tutorial?
>>>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>

On Fri, 24 Apr 2015, Steve Ankeny wrote:
> It looks like I need the Schema Master and RID Master roles installed on my
> Samba AD DC
>
> How do I get those roles installed and/or how do I expand the Samba AD 
> schema?  I'll search the Wiki
If you only have one AD DC, then they are already on your DC and there is 
no other place the FSMO roles could be.  Installed is not the term I would 
use, they are not like schema updates.  They are just services which are 
required in an AD network, and any AD DC can (and must be able to) perform 
any of them.  Just that only one of them can hold that particular role at 
any given tome, so one is considered a master.  They are explained in more 
detail here (it also tells you how to see which DC holds each role):

https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles#The_five_FSMO_roles

There is a wiki page on extensions, though there's not much detail there:

https://wiki.samba.org/index.php/Samba_AD_Schema_Extenstions

For the most part, things are no different than schema extensions on a 
Windows DC.  Except you need to use different tools to apply them if you 
want to do it by CLI on the server. (You should be able to use the Windows 
MMC tools against a Samba server just like you would against a Windows DC).