samba - Jun 2020 - Ubuntu 20.04 setup

Louis, et al. Hi!

So, I'm working on a 20.04 setup. 
I think I'll still use the distro version and not Louis' packages. [No
offense Louis - I just need to be sure if (forbid) anything happens to Louis,
his packages aren't going to be supported any more, and I'll be on my
own for security updates etc. The 20.04 versions are pretty current, and I think
will meet my needs for the life of the distro. If not, I can always re-evaluate
that at the time.]

So, is there anything new in 20.04 I need to be aware of vs 18.04?
systemd.resolved seemed to be the biggest "gotcha" previously.
Anything else that's different in 20.04 I should be aware of?

I'm planning on using the 18.04 walk-through you [Louis] did 18mo or so ago
- with a few changes to meet my needs. (eg. I'm using internal DNS, not
BIND9, etc.)

TIA
-Greg

Hi,

I tend to avoid thinking in distribution's terms, trying to rely on
underlying methods which are the (generally) the same across different
platforms and distributions.
I believe the Samba wiki explains quite well how to make things work for
Samba as file server or for Samba as AD DC using common tools. Even for PAM
configuration which is kind of a mess, the wiki gives nice advices...

Cheers,

m.

Le jeu. 4 juin 2020 ? 20:24, Gregory Sloop via samba <samba at
lists.samba.org>
a ?crit :
> Louis, et al. Hi!
>
> So, I'm working on a 20.04 setup.
> I think I'll still use the distro version and not Louis' packages.
[No
> offense Louis - I just need to be sure if (forbid) anything happens to
> Louis, his packages aren't going to be supported any more, and I'll
be on
> my own for security updates etc. The 20.04 versions are pretty current, and
> I think will meet my needs for the life of the distro. If not, I can always
> re-evaluate that at the time.]
>
> So, is there anything new in 20.04 I need to be aware of vs 18.04?
> systemd.resolved seemed to be the biggest "gotcha" previously.
> Anything else that's different in 20.04 I should be aware of?
>
> I'm planning on using the 18.04 walk-through you [Louis] did 18mo or so
> ago - with a few changes to meet my needs. (eg. I'm using internal DNS,
not
> BIND9, etc.)
>
> TIA
> -Greg
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Hai Greg, 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Gregory Sloop via samba
> Verzonden: donderdag 4 juni 2020 19:17
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Ubuntu 20.04 setup
> 
> Louis, et al. Hi!
> 
> So, I'm working on a 20.04 setup. 
> I think I'll still use the distro version and not Louis' 
> packages. [No offense Louis - I just need to be sure if 
> (forbid) anything happens to Louis, his packages aren't going 
> to be supported any more, and I'll be on my own for security 
> updates etc. The 20.04 versions are pretty current, and I 
> think will meet my needs for the life of the distro. If not, 
> I can always re-evaluate that at the time.]
Ah, totaly understandable and i get that.  No worries ;-) 
So if i suddenly would get run over with a train, what then
Well, simple switch back to official packages, using these commands.

apt-get remove samba winbind samba-* --autoremove 
apt-get install samba winbind
And your done. ;-) 

You only miss spotlight support then. 

But im lucky, so far i dont see trains here ;-) 
> 
> So, is there anything new in 20.04 I need to be aware of vs 
> 18.04? systemd.resolved seemed to be the biggest "gotcha"
previously.
> Anything else that's different in 20.04 I should be aware of?
You can still use that howto yes, i have a new base for 20.04 but not finished.
Cant post it yet. But after today i have 3 weeks vacation, i'll do some
howto updating
Since i took the best weeks for vacation.. with rain.. :-( 
and not going anywhere, Its still to soon in my opinion for that. 

> I'm planning on using the 18.04 walk-through you [Louis] did 
> 18mo or so ago - with a few changes to meet my needs. (eg. 
> I'm using internal DNS, not BIND9, etc.)
Well, on that part, if you switch to full systemd setup. 
what i personaly do like, you need to "correclty" remove/switch on
ubuntu.
Or completly remove netplan and all crap that was added and configure
systemd-networkd manualy
Or use netplan to configure it and use 
https://websiteforstudents.com/how-to-setup-static-fixed-ip-on-ubuntu-20-04-18-04/
I just dont like netplan so i remove it, thats a choice. 

If you use multihoming/multiple interfaces. 
Dont configure : /etc/systemd/resolv.conf 

Configure DNS and routings withing the needed interface ( can be in mutiple
files as look you watch the loading order. )
Eth0 (lan) -> DNS samba 
Eth1 (wan) -> DNS internet 

On AD-DC, use ntp, oblicated. (due sntp and AD to distribute time to pc's), 
i dont advice chrony. But again thats personal, chrony should work.

On members, dont install ntp, just not needed, configure systemd-timesyncd point
to AD-DC ips.

And last tips if you use systemd, is optimze your boot process. 
systemd-analyze plot > boot-prosess.svg 
IF you use that and are optimizing the boot process.
Use : systemctl edit servicename 

That keeps everything clean and that avoids touching/adjusting by debian/system
suplied files.

Test that a bit, and if you boot setup if perfect. Enable unattended upgrades,
yes then you can.
My boot prio is. 
- wait for network
- enable bind
- enable ntp
- enable samba 

A simple example on smbd ( this applies for all samba services but you need to
to it for nmbd smbd samba samba-ad-dc )

systemctl edit smbd
[Unit]
Wants=network-online.target
After=network.target network-online.target nmbd.service winbind.service
bind9.service

All i add here is : bind9.service ntp.service
Save and done.

If you dont use it, fine also but now its always starting correctly if you use
bind9 or ntp or not.


Greetz, 

Louis

Hai,  
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> mathias dufresne via samba
> Verzonden: vrijdag 5 juni 2020 10:08
> Aan: Greg Sloop
> CC: samba
> Onderwerp: Re: [Samba] Ubuntu 20.04 setup
> 
> Hi,
> 
> I tend to avoid thinking in distribution's terms, trying to rely on
> underlying methods which are the (generally) the same across different
> platforms and distributions.
Well here i disagree a bit, there is some notible difference in debian based
systems and
Red hat based systems. 
> I believe the Samba wiki explains quite well how to make 
> things work for Samba as file server or for Samba as AD DC using common 
> tools. Even for PAM
> configuration which is kind of a mess, the wiki gives nice advices...
I think here most "make a mess" themself, change to much, where you
can use 90% of the defaults.
For example, i dont change anything manualy in pam. 
And everything works great here and i do use things as NFSv4 kerberized with
automounts for example
For most hard to configure in general but thats an easy one. 

Yes, the wiki explains perfectly but its not optimize per OS and it can be bit
of a maze for new people.
I do and have optimized my setups for debian/ubuntu and i challenge everyone to
make a faster and
better working setup with minimal changes to system supplied files, compaired to
how im set up now.
I hope someone can, because, i'll learn from it and my systems will improve
then also ;-)

A default setup compaired to my optimzed setup, well give about 5-10% speedup
minimal.
Less software, less security updates due that, less risk, less overhead, faster
responding.

But again, its an opinion, mine, you might disagree and thats totaly fine.

Just as example. 
My AD-DC.  
/dev/xvda1                                    6.0G  2.1G  3.6G  36% /
Only 2.1GB in use. 
Samba-ad-dc bind9 postfix snmp nfs (+automounting) ntp ssh syslog 

Ad-DC Mem use: ( in MB ) 
              total        used        free      shared  buff/cache   available
Mem:           1968         895         476          22         596         875
Swap:          1895           0        1895

Network, about 12 server, 70 users, 150 groups, 60 pc's. 
About 6000 objects in AD. 

Ok back to work, need to finish up things and prepair thing for my collage


Greetz, 

Louis

Sorry for the direct mail Louis - I intended to post to the list. I'll do
that now.

---
Top posting...

Quick follow-up.
Louis - I might change my mind and use your repo.
Are the 20.04 packages built yet? 

If not, not a huge issue - but I thought I might try them.

-Greg


LPHvBvs> Hai Greg, 
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
>> Gregory Sloop via samba
>> Verzonden: donderdag 4 juni 2020 19:17
>> Aan: samba at lists.samba.org
>> Onderwerp: [Samba] Ubuntu 20.04 setup
>> Louis, et al. Hi!
>> So, I'm working on a 20.04 setup. 
>> I think I'll still use the distro version and not Louis' 
>> packages. [No offense Louis - I just need to be sure if 
>> (forbid) anything happens to Louis, his packages aren't going 
>> to be supported any more, and I'll be on my own for security 
>> updates etc. The 20.04 versions are pretty current, and I 
>> think will meet my needs for the life of the distro. If not, 
>> I can always re-evaluate that at the time.]
LPHvBvs> Ah, totaly understandable and i get that.  No worries ;-) 
LPHvBvs> So if i suddenly would get run over with a train, what then
LPHvBvs> Well, simple switch back to official packages, using these commands.

LPHvBvs> apt-get remove samba winbind samba-* --autoremove 
LPHvBvs> apt-get install samba winbind
LPHvBvs> And your done. ;-) 

LPHvBvs> You only miss spotlight support then. 

LPHvBvs> But im lucky, so far i dont see trains here ;-) 

>> So, is there anything new in 20.04 I need to be aware of vs 
>> 18.04? systemd.resolved seemed to be the biggest "gotcha"
previously.
>> Anything else that's different in 20.04 I should be aware of?
LPHvBvs> You can still use that howto yes, i have a new base for 20.04 but
not finished.
LPHvBvs> Cant post it yet. But after today i have 3 weeks vacation, i'll
do some howto updating
LPHvBvs> Since i took the best weeks for vacation.. with rain.. :-( 
LPHvBvs> and not going anywhere, Its still to soon in my opinion for that. 

>> I'm planning on using the 18.04 walk-through you [Louis] did 
>> 18mo or so ago - with a few changes to meet my needs. (eg. 
>> I'm using internal DNS, not BIND9, etc.)
LPHvBvs> Well, on that part, if you switch to full systemd setup. 
LPHvBvs> what i personaly do like, you need to "correclty"
remove/switch on ubuntu.
LPHvBvs> Or completly remove netplan and all crap that was added and
LPHvBvs> configure systemd-networkd manualy
LPHvBvs> Or use netplan to configure it and use 
LPHvBvs>
https://websiteforstudents.com/how-to-setup-static-fixed-ip-on-ubuntu-20-04-18-04/
LPHvBvs> I just dont like netplan so i remove it, thats a choice. 

LPHvBvs> If you use multihoming/multiple interfaces. 
LPHvBvs> Dont configure : /etc/systemd/resolv.conf 

LPHvBvs> Configure DNS and routings withing the needed interface (
LPHvBvs> can be in mutiple files as look you watch the loading order. )
Eth0 (lan) ->> DNS samba 
Eth1 (wan) ->> DNS internet 

LPHvBvs> On AD-DC, use ntp, oblicated. (due sntp and AD to distribute time to
pc's),
LPHvBvs> i dont advice chrony. But again thats personal, chrony should work.

LPHvBvs> On members, dont install ntp, just not needed, configure
LPHvBvs> systemd-timesyncd point to AD-DC ips. 

LPHvBvs> And last tips if you use systemd, is optimze your boot process. 
LPHvBvs> systemd-analyze plot > boot-prosess.svg 
LPHvBvs> IF you use that and are optimizing the boot process.
LPHvBvs> Use : systemctl edit servicename 

LPHvBvs> That keeps everything clean and that avoids
LPHvBvs> touching/adjusting by debian/system suplied files.

LPHvBvs> Test that a bit, and if you boot setup if perfect. Enable
LPHvBvs> unattended upgrades, yes then you can. 
LPHvBvs> My boot prio is. 
LPHvBvs> - wait for network
LPHvBvs> - enable bind
LPHvBvs> - enable ntp
LPHvBvs> - enable samba 

LPHvBvs> A simple example on smbd ( this applies for all samba
LPHvBvs> services but you need to to it for nmbd smbd samba samba-ad-dc )

LPHvBvs> systemctl edit smbd
LPHvBvs> [Unit]
LPHvBvs> Wants=network-online.target
LPHvBvs> After=network.target network-online.target nmbd.service
winbind.service bind9.service

LPHvBvs> All i add here is : bind9.service ntp.service
LPHvBvs> Save and done.

LPHvBvs> If you dont use it, fine also but now its always starting
LPHvBvs> correctly if you use bind9 or ntp or not. 


LPHvBvs> Greetz, 

LPHvBvs> Louis





-- 
Gregory Sloop, Principal: Sloop Network & Computer Consulting
Voice: 503.251.0452 x121
EMail: gregs at sloop.net
http://www.sloop.net
---

Hai Gregory, 

Yes, the latest 4.12.5 are online, im running them myself. 

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Gregory Sloop via samba
> Verzonden: dinsdag 14 juli 2020 1:03
> Aan: L.P.H. van Belle via samba
> Onderwerp: Re: [Samba] Ubuntu 20.04 setup
> 
> Sorry for the direct mail Louis - I intended to post to the 
> list. I'll do that now.
> 
> ---
> Top posting...
> 
> Quick follow-up.
> Louis - I might change my mind and use your repo.
> Are the 20.04 packages built yet? 
> 
> If not, not a huge issue - but I thought I might try them.
> 
> -Greg
> 
> 
> LPHvBvs> Hai Greg, 
> 
> >> -----Oorspronkelijk bericht-----
> >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> >> Gregory Sloop via samba
> >> Verzonden: donderdag 4 juni 2020 19:17
> >> Aan: samba at lists.samba.org
> >> Onderwerp: [Samba] Ubuntu 20.04 setup
> 
> >> Louis, et al. Hi!
> 
> >> So, I'm working on a 20.04 setup. 
> >> I think I'll still use the distro version and not Louis' 
> >> packages. [No offense Louis - I just need to be sure if 
> >> (forbid) anything happens to Louis, his packages aren't going 
> >> to be supported any more, and I'll be on my own for security 
> >> updates etc. The 20.04 versions are pretty current, and I 
> >> think will meet my needs for the life of the distro. If not, 
> >> I can always re-evaluate that at the time.]
> 
> LPHvBvs> Ah, totaly understandable and i get that.  No worries ;-) 
> LPHvBvs> So if i suddenly would get run over with a train, what then
> LPHvBvs> Well, simple switch back to official packages, using 
> these commands.
> 
> LPHvBvs> apt-get remove samba winbind samba-* --autoremove 
> LPHvBvs> apt-get install samba winbind
> LPHvBvs> And your done. ;-) 
> 
> LPHvBvs> You only miss spotlight support then. 
> 
> LPHvBvs> But im lucky, so far i dont see trains here ;-) 
> 
> 
> >> So, is there anything new in 20.04 I need to be aware of vs 
> >> 18.04? systemd.resolved seemed to be the biggest
"gotcha"
> previously.
> >> Anything else that's different in 20.04 I should be aware of?
> 
> LPHvBvs> You can still use that howto yes, i have a new base 
> for 20.04 but not finished.
> LPHvBvs> Cant post it yet. But after today i have 3 weeks 
> vacation, i'll do some howto updating
> LPHvBvs> Since i took the best weeks for vacation.. with rain.. :-( 
> LPHvBvs> and not going anywhere, Its still to soon in my 
> opinion for that. 
> 
> 
> >> I'm planning on using the 18.04 walk-through you [Louis] did 
> >> 18mo or so ago - with a few changes to meet my needs. (eg. 
> >> I'm using internal DNS, not BIND9, etc.)
> 
> LPHvBvs> Well, on that part, if you switch to full systemd setup. 
> LPHvBvs> what i personaly do like, you need to "correclty" 
> remove/switch on ubuntu.
> LPHvBvs> Or completly remove netplan and all crap that was added and
> LPHvBvs> configure systemd-networkd manualy
> LPHvBvs> Or use netplan to configure it and use 
> LPHvBvs> 
> https://websiteforstudents.com/how-to-setup-static-fixed-ip-on
> -ubuntu-20-04-18-04/
> LPHvBvs> I just dont like netplan so i remove it, thats a choice. 
> 
> LPHvBvs> If you use multihoming/multiple interfaces. 
> LPHvBvs> Dont configure : /etc/systemd/resolv.conf 
> 
> LPHvBvs> Configure DNS and routings withing the needed interface (
> LPHvBvs> can be in mutiple files as look you watch the 
> loading order. )
> Eth0 (lan) ->> DNS samba 
> Eth1 (wan) ->> DNS internet 
> 
> LPHvBvs> On AD-DC, use ntp, oblicated. (due sntp and AD to 
> distribute time to pc's),
> LPHvBvs> i dont advice chrony. But again thats personal, 
> chrony should work.
> 
> LPHvBvs> On members, dont install ntp, just not needed, configure
> LPHvBvs> systemd-timesyncd point to AD-DC ips. 
> 
> LPHvBvs> And last tips if you use systemd, is optimze your 
> boot process. 
> LPHvBvs> systemd-analyze plot > boot-prosess.svg 
> LPHvBvs> IF you use that and are optimizing the boot process.
> LPHvBvs> Use : systemctl edit servicename 
> 
> LPHvBvs> That keeps everything clean and that avoids
> LPHvBvs> touching/adjusting by debian/system suplied files.
> 
> LPHvBvs> Test that a bit, and if you boot setup if perfect. Enable
> LPHvBvs> unattended upgrades, yes then you can. 
> LPHvBvs> My boot prio is. 
> LPHvBvs> - wait for network
> LPHvBvs> - enable bind
> LPHvBvs> - enable ntp
> LPHvBvs> - enable samba 
> 
> LPHvBvs> A simple example on smbd ( this applies for all samba
> LPHvBvs> services but you need to to it for nmbd smbd samba 
> samba-ad-dc )
> 
> LPHvBvs> systemctl edit smbd
> LPHvBvs> [Unit]
> LPHvBvs> Wants=network-online.target
> LPHvBvs> After=network.target network-online.target 
> nmbd.service winbind.service bind9.service
> 
> LPHvBvs> All i add here is : bind9.service ntp.service
> LPHvBvs> Save and done.
> 
> LPHvBvs> If you dont use it, fine also but now its always starting
> LPHvBvs> correctly if you use bind9 or ntp or not. 
> 
> 
> LPHvBvs> Greetz, 
> 
> LPHvBvs> Louis
> 
> 
> 
> 
> 
> -- 
> Gregory Sloop, Principal: Sloop Network & Computer Consulting
> Voice: 503.251.0452 x121
> EMail: gregs at sloop.net
> http://www.sloop.net
> ---
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>