similar to: Samba AD Best Practice (DNS)

On 2017-10-12 11:47 AM, Rowland Penny via samba wrote: > If you already have a domain, I would set up Active Directory as a > subdomain of this, e.g. instead of using 'network.ca', use > 'ad.network.ca' and the FQDN 'dc1.ad.network.ca' for the DC. Thanks for the reply. I think that ship's already sailed, the domain has been running as network.ca since Samba4

On Thu, 12 Oct 2017 11:00:35 -0400 Pat Suwalski via samba <samba at lists.samba.org> wrote: > Hello, > > This question is about best practice of introducing sambda-ad-dc to > an organization that already has networking, and being minimally > disruptive about it. I guess this question applies equally to adding > a Windows AD server, but most people with that setup would

On 2017-10-12 12:30 PM, Rowland Penny via samba wrote: > It might help if you described your network. I thought I went into detail in the first message: For this example: - Network: 172.18.0.0/24 - Domain: network.ca - AD server: ad.network.ca, 172.18.0.20 - Gateway/DNS: 172.18.0.1 The gateway is running as the main DNS server, and has the various underscore ("_") entries

Here's what we do for our school district: - Each site is in its own isolated network - Each site has two DCs and a file server - The DHCP server hands out the DCs of the site as both DNS servers (i.e. dc1 = 192.168.0.2, 192.168.0.3) - The DNS server runs from the Samba DCs (using bind9 or the Internal DNS, does not matter) - If we want something else to resolve, we add an A record (i.e.

Pat There's no such thing as "best practice" - there's good and bad practice and I hope that here (Samba ML) you will get some good advice, in return for a good question. The environment you describe, to me, implies that it would be best if you simply "fit in". You can but it will take a bit of work (not too much). It does not matter where DNS comes from, provided it

Hello, I have now spent 30 hours trying to get this working, so it's time to get some professinoal help. :) In a nutshell, I would like to have a sambda AD PDC that authenticates both Windows and Debian. On Linux, I would like to use SSSD. I have followed the steps on the wiki: - https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO -

On 2017-10-12 02:26 PM, Luke Barone via samba wrote: > - If we want something else to resolve, we add an A record (i.e. > mail.ad.district.com IN A 192.168.0.5) or a CNAME record (i.e. > mail.ad.district.com IN CNAME mail.district.com) Right, so you have the ad.x subdomain as well. That's what we don't have, and it seems it would require starting from scratch to implement it.

On Thu, 12 Oct 2017 12:07:17 -0400 Pat Suwalski via samba <samba at lists.samba.org> wrote: > On 2017-10-12 11:47 AM, Rowland Penny via samba wrote: > > If you already have a domain, I would set up Active Directory as a > > subdomain of this, e.g. instead of using 'network.ca', use > > 'ad.network.ca' and the FQDN 'dc1.ad.network.ca' for the DC.

Hi all, I''m thinking of useing sub-domains as account keys, something I''ve played with previously. I have accounts and users, fairly standard, except that users can belong to many accounts, and accounts can have many users. So I figure I need to have an area on the main domain, that allows users to view their account memberships and things. Sort of like a dashboard for each

Rowland, Can I use AD bind as slave for some zones of our bind master server? On Wed, May 17, 2017 at 1:00 PM, Rowland Penny <rpenny at samba.org> wrote: > On Wed, 17 May 2017 11:59:21 -0300 > Elias Pereira via samba <samba at lists.samba.org> wrote: > > > > > > > Is anything else listening on port 53 ? > > > > > > I don't think so.

On 2017-10-13 06:09 PM, Jon Gerdes via samba wrote: > There's no such thing as "best practice" - there's good and bad > practice and I hope that here (Samba ML) you will get some good advice, > in return for a good question. Thanks for this very thoughtful reply. > The environment you describe, to me, implies that it would be best if > you simply "fit

hi folks, To forward everything that does not belong to AD (subdomain ad.domain.intra) to the domain "domain.intra" I configured an entry as show below in named.conf.local zone "domain.intra" IN { type forward; forward only; forwarders { 172.16.1.10; }; # ns1.domain.intra }; Within this network (172.16.1.0/24) I have dc1 (dc1.ad.domain.intra), dc2

Thanks. I was able to verify through the following command: *samba-tool dns query localhost yourdomain.lan @ ALL -U administrator* -------------- Rowland, Some time ago I had made some questions about dns with samba4. In the topic below you say: "I would suggest you create a sub domain of your main domain (this is recommended anyway) i.e. if your main domain is called

Howdy, I've been thinking a lot about definition list syntax, and what I did and didn't like about the PHP Markdown Extra syntax (which seems to be a de-facto standard, discount notwithstanding, yes?). What I came up with is a single character change to the PHP Markdown Extra syntax. I just published a detailed explanation of my thoughts and reasoning for this on [my

Whilst always using the DMA API is OK on ARM systems in most cases, there can be a problem if a hypervisor fails to tell its guest that a virtio device is cache-coherent. In that case, the guest will end up making non-cacheable mappings for DMA buffers (i.e. the vring), which, if the host is using a cacheable view of the same buffer on the other end, is not a recipe for success. It turns out that

Whilst always using the DMA API is OK on ARM systems in most cases, there can be a problem if a hypervisor fails to tell its guest that a virtio device is cache-coherent. In that case, the guest will end up making non-cacheable mappings for DMA buffers (i.e. the vring), which, if the host is using a cacheable view of the same buffer on the other end, is not a recipe for success. It turns out that

> > I followed this url to set up Samba AD DC. > > https://github.com/thctlo/samba4/blob/master/full-howto-Ubuntu18. > 04-samba-AD_DC.txt > > > > I do have it working. I am testing with a Windows 10 VM as a member > > of the domain. > > The machine joins the domain. Also, as administrator, I can create > > and enforce > > Group Policies. from

On Tue, 12 Sep 2017 10:40:50 -0300 Flávio Silveira via samba <samba at lists.samba.org> wrote: > Thanks for the replies Rowland and Louis! > > Giving all that was said here is a snippet of what I have in > /var/lib/dhcp/dhclient.enp2s0.leases > > Don't know why my interface is named enp2s0, but I only have one, > this might be a driver thing. No, it is a

On Thu, Mar 19, 2015 at 11:12 AM Rafael Espíndola < rafael.espindola at gmail.com> wrote: > Having the analogous of -O0/-O1/-O2/-O3 for the LTO pipeline makes > sense I think. > > I agree that something along option number 2 is probably the best. > Some questions: > > * Should "clang -O3 foo.o -o foo" use LTO with -O3? > * Should "clang foo.o -o

On Fri, 2018-04-06 at 00:16 -0700, Christoph Hellwig wrote: > On Fri, Apr 06, 2018 at 08:23:10AM +0530, Anshuman Khandual wrote: > > On 04/06/2018 02:48 AM, Benjamin Herrenschmidt wrote: > > > On Thu, 2018-04-05 at 21:34 +0300, Michael S. Tsirkin wrote: > > > > > In this specific case, because that would make qemu expect an iommu, > > > > > and there