samba - Nov 2018 - Install SAMBA4 on LXC

Hi,

I wonder if makes sense to install SAMBA4 AD DC on a LXC container. What do
you think?
The AD DC has around 50 users.

Thanks in advance

-- 
--
Sergio Belkin
LPIC-2 Certified - http://www.lpi.org

Mandi! Sergio Belkin via samba
  In chel di` si favelave...
> I wonder if makes sense to install SAMBA4 AD DC on a LXC container. What do
> you think?
> The AD DC has around 50 users.
I'm using LXC (proxmox) for my DC, without troubles.

Only a note: you have to add support for system clock management
capability in container; in proxmox lingo, i've added to container
config file:
	lxc.cap.drop:
	lxc.cap.drop: mac_admin mac_override sys_module sys_rawio

Alternatively, you can add to 'ntp.conf':

	disable kernel

to prevent ntp instance to modify kernel time (in this way, you really
need an ntp server or ntp cient correctly configured on host system, of
course).

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

hi.
i'm using dc on two (for replication) proxmox server in dom-0 with 
standart debian samba 4.7.8+nmu-1~deb9, named, dhcpd, etc.
and same member servers for shares in lxc with samba 4.9.2.
reasons:
1) new samba version and
2) On a Samba Active Directory (AD) domain controller (DC), Windows ACL 
support is enabled globally, and therefore shares with POSIX ACLs are 
not supported. 
<https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs>

Victor Siman'kin.

26.11.2018 20:32, Sergio Belkin via samba пишет:
> Hi,
>
> I wonder if makes sense to install SAMBA4 AD DC on a LXC container. What do
> you think?
> The AD DC has around 50 users.
>
> Thanks in advance
>