09.09.2016 00:01, Jeremie Courreges-Anglas пишет:
samba port maintainer here,
kasak <ka...@kasakoff.net> writes:
Maybe I am doing something wrong ?
I have tried to provision domain and got error that samba was compiled
without acl support.
On some forums I found advice to use "--use-ntvfs" option when provisioning.
But it appeared that samba-tool doesn't know about this option:
$ doas samba-tool domain provision --use-ntvfs
Usage: samba-tool domain provision [options]
samba-tool domain provision: error: no such option: --use-ntvfs
I think this option was deprecated in new versions of samba, but i was
not able to find information about it.
No idea what went wrong in the last updates. IIUC it's just a matter of
fixing domain provisioning, which used to work fine. I'll take a look
at this soon(tm).
So, is it really possible to use OpenBSD as a DC?
Everything is possible, but our lack of ACLs and extended attributes
make OpenBSD a poor choice for samba, even if upstream supports backends
that don't suffer these limitations. From my POV, net/samba is here
first for simple file sharing and client libraries support.
I think, if Theo says that we don't need acl, than we don't need acl. He
knows better. Keeping things simple is very secure and this is good!
I am very thankful to you for maintaining samba on OpenBSD! Undoubtedly
, OpenBSD is now best of all OS, and fresh port of samba is what we
really need!
Maybe OpenBSD is not the best choice for domain controller, but it is
the best choice for the rest!
Anyway thank you for answer and for fresh port!
