samba - Jul 2020 - Intermittent permission denied when accessing share

On 01/07/2020 20:16, Lorenzo Milesi via samba wrote:
> For the record, with the support of TranquilIT we added a new server for DC
an "demoted" this one to fileserver only and it's working like a
charm.
>
> So I suppose the "single server" solution is not viable anyomre,
or at least it doesn't seem so.
>
We have never recommended using a DC as a fileserver, it is possible, 
but fraught with problems. As you have found, it is better to run a DC 
and a separate fileserver.

Rowland

I never said the team does recommend it, still I don't see the purpose of
saying "it's possible" when can be "fraught with
problems". Maybe the wiki [1] should be more explicit on this, despite
discouraging and suggesting better options it doesn't say it's highly
problematic, it's still offered as an option.

https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Using_the_Domain_Controller_as_a_File_Server

----- Original Message -----
> From: "samba" <samba at lists.samba.org>
> To: "samba" <samba at lists.samba.org>
> Sent: Wednesday, July 1, 2020 9:27:42 PM
> Subject: Re: [Samba] Intermittent permission denied when accessing share
> On 01/07/2020 20:16, Lorenzo Milesi via samba wrote:
>> For the record, with the support of TranquilIT we added a new server
for DC an
>> "demoted" this one to fileserver only and it's working
like a charm.
>>
>> So I suppose the "single server" solution is not viable
anyomre, or at least it
>> doesn't seem so.
>>
> We have never recommended using a DC as a fileserver, it is possible,
> but fraught with problems. As you have found, it is better to run a DC
> and a separate fileserver.
> 
> Rowland
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
-- 
Lorenzo Milesi - lorenzo.milesi at yetopen.it

YetOpen S.r.l. - https://www.yetopen.it/
Via Salerno 18 - 23900 Lecco - ITALY -
Tel +39 0341 220 205 - Fax +39 178 6070 222

Think green - Non stampare questa e-mail se non necessario / Don't print
this email unless necessary

-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso
esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da
ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo
679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non
autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad
eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci
non appena possibile.
Grazie.

Confidentiality notice: this email message including any attachment is for the
sole use of the intended recipient and may contain confidential and privileged
information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection
Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or
distribution
is prohibited. If you are not the intended recepient please delete this message
without copying, printing or forwarding it to others, and alert us as soon as
possible.
Thank you.

On 09/07/2020 07:20, Lorenzo Milesi via samba wrote:
> I never said the team does recommend it, still I don't see the purpose
of saying "it's possible" when can be "fraught with
problems". Maybe the wiki [1] should be more explicit on this, despite
discouraging and suggesting better options it doesn't say it's highly
problematic, it's still offered as an option.
Whilst we do not recommend using a Samba DC as a fileserver, they can be 
used as a basic fileserver, you just need to be be aware of the 
limitations. You alse need to accept that a DC in a small office is a 
totally different proposition to a DC in a domain with a lot of users.

I have added an extra warning to the wiki page.

Rowland