samba - Mar 2018 - Share users across domains

I forgot to mention, I'm using samba 3.

Citando Waishon <waishon009 at gmail.com>:
> Hi,
>  
>   I would use one domain and some groups. So you put your Students  
> in the "students" group and the administratives in the
"admin".
>  
>   Then simply create two OUs, one for the admin machine and one for  
> the machine for both. Then you're able to create some group
policy's
> to restrict the login to the admin group for the admin machine OU.
>  
>   This is a scenario where you can find a lot of tutorials on the  
> internet. All Microsoft tutorials about setting up groups,  
> permissions or GPOs would apply here.
>   (As far as you would like to use Windows machines, are you?  
> Otherwise you should mention which OS you will use in your  
> environment :)).
>  
>   Von: Rodrigo Abrantes Antunes via samba
>   Gesendet: Dienstag, 27. März, 15:29
>   Betreff: [Samba] Share users across domains
>   An: samba at lists.samba.org
>
>  
>   Hi, I'm new to samba and I need help in how to setup this: ​I have  
> 2 networks: Academic and Administrative ​I have 2 kind of users:  
> Students and Administratives ​What I need is this:  ​Students can  
> only login in the Academic network ​Administratives need to login in  
> both networks ​I think about make 2 domais and put the academic  
> machines in the academic domain and the administrative machines in  
> the administrative domain, but in this way how could I make  
> administrative users login in the academic machines?   -- Rodrigo  
> Abrantes Antunes Instituto Federal Sul-rio-grandense -- To  
> unsubscribe from this list go to the following URL and read the  
> instructions: https://lists.samba.org/mailman/options/samba
>  
-- 
Rodrigo Abrantes Antunes
Instituto Federal Sul-rio-grandense

On Tue, 27 Mar 2018 14:25:47 +0000
Rodrigo Abrantes Antunes via samba <samba at lists.samba.org> wrote:
>   I forgot to mention, I'm using samba 3.
> 
Well don't, Samba 3 is dead, it is EOL as far as Samba is concerned, it
will not receive any further updates from Samba.

If the only Samba that your OS supplies is Version 3.x.x, then update
your OS as well.

Rowland

I use samba 3 with ldap with thousand of users, some time ago I  
tried to migrate to samba 4 but I couldn't, It was too dificult and I  
didn't understand the documentation.

​Could you share a reliable way of doing this migration with me?

Citando Rowland Penny via samba <samba at lists.samba.org>:
> On Tue, 27 Mar 2018 14:25:47 +0000
> Rodrigo Abrantes Antunes via samba <samba at lists.samba.org> wrote:
>
>> I forgot to mention, I'm using samba 3.
>
> Well don't, Samba 3 is dead, it is EOL as far as Samba is concerned, it
> will not receive any further updates from Samba.
>
> If the only Samba that your OS supplies is Version 3.x.x, then update
> your OS as well.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read  
> theinstructions:  https://lists.samba.org/mailman/options/samba
-- 
Rodrigo Abrantes Antunes
Instituto Federal Sul-rio-grandense

Am Dienstag, 27. März 2018, 14:25:47 CEST schrieb Rodrigo Abrantes 
Antunes via samba:
>   I forgot to mention, I'm using samba 3.
OK. Quiet old thingy :-(

you should read realy old docs:
https://www.samba.org/samba/docs/old/Samba3-HOWTO/
InterdomainTrusts.html

chapter : Interdomain Trust Facilities

Have fun

-- 

Gruss
	Harry Jede

On Tue, 27 Mar 2018 22:41:15 +0200
Harry Jede via samba <samba at lists.samba.org> wrote:
> Am Dienstag, 27. März 2018, 14:25:47 CEST schrieb Rodrigo Abrantes 
> Antunes via samba:
> >   I forgot to mention, I'm using samba 3.
> OK. Quiet old thingy :-(
> 
> you should read realy old docs:
> https://www.samba.org/samba/docs/old/Samba3-HOWTO/
> InterdomainTrusts.html
> 
> chapter : Interdomain Trust Facilities
> 
> Have fun
> 
Please don't give the OP ideas, Samba 3 is dead and shouldn't be used
to set up anything new. I can understand maintaining an existing
NT4-style domain, but not setting up a new one.

It gets harder and harder to keep windows machines working with an
NT4-style domain, it doesn't make sense to set up a new one, not when
it is easier to set up and maintain an AD domain.

Rowland