Hi Andrew! I notice, when we have a lot of domain Samba replicate object from all domain - it's too long for us (GC about 16gb). I going to use --domain-critical-only, and after join disable GC on Samba. -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Andrew Bartlett Sent: Friday, October 30, 2015 6:31 AM To: Luchko Dmitriy; samba at lists.samba.org Subject: Re: [Samba] Join Samba without GC role On Wed, 2015-10-28 at 10:32 +0000, Luchko Dmitriy wrote:> Hi, > > Can we join Samba without GC role (global catalog) use samba-tool > domain join? >As we replicate a single domain, there isn't any additional data replicated as a GC. We always present the GC port, read only. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Hi Andrew! I notice, when we have a lot of domain Samba replicate object from all domain - it's too long for us (GC about 16gb). I going to use --domain-critical-only, and after join disable GC on Samba. Update: additional question: where is Samba store Global Catalog partition? -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Andrew Bartlett Sent: Friday, October 30, 2015 6:31 AM To: Luchko Dmitriy; samba at lists.samba.org Subject: Re: [Samba] Join Samba without GC role On Wed, 2015-10-28 at 10:32 +0000, Luchko Dmitriy wrote:> Hi, > > Can we join Samba without GC role (global catalog) use samba-tool > domain join? >As we replicate a single domain, there isn't any additional data replicated as a GC. We always present the GC port, read only. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
On Fri, 2015-10-30 at 06:27 +0000, Luchko Dmitriy wrote:> Hi Andrew! > > I notice, when we have a lot of domain Samba replicate object from > all domain - it's too long for us (GC about 16gb). > I going to use --domain-critical-only, and after join disable GC on > Samba.Samba replicates no additional information to be the GC, so it won't help. In Samba, the GC port is just another view of the main databse. The Global Catalog would only be different if we supported sub-domains, which we don't. If there is 16GB of data, then Samba simply won't be able to hold it, no matter what, due to the TDB limits (let alone the structural limits that blow up well before then). Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Thanks for the answer! Is that true if we have Subdomains, Samba write to DB information only about join-domain? And what option --domain-critical-only do? I did not see the difference - with or without. -----Original Message----- From: Andrew Bartlett [mailto:abartlet at samba.org] Sent: Saturday, October 31, 2015 12:14 PM To: Luchko Dmitriy <Luchko.D at digdes.com>; samba at lists.samba.org Subject: Re: [Samba] Join Samba without GC role On Fri, 2015-10-30 at 06:27 +0000, Luchko Dmitriy wrote:> Hi Andrew! > > I notice, when we have a lot of domain Samba replicate object from all > domain - it's too long for us (GC about 16gb). > I going to use --domain-critical-only, and after join disable GC on > Samba.Samba replicates no additional information to be the GC, so it won't help. In Samba, the GC port is just another view of the main databse. The Global Catalog would only be different if we supported sub-domains, which we don't. If there is 16GB of data, then Samba simply won't be able to hold it, no matter what, due to the TDB limits (let alone the structural limits that blow up well before then). Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba