On Sat, 2002-11-09 at 10:29, Yura Pismerov wrote: > > > Caleb O'Connell wrote: > > > > is it possible and how difficult is it, to use LDAP for all the user > > accounts and groups and password management? would this be something you > > would want to do? or is it better to stick with samba's initila way of > > dealing with users? > > It depends. It definitely makes sense if you already have LDAP setup > and/or if you are looking for centralized account management (same > username/password for Windows, Unix, Mail, etc.). Also it is feasible to > do if you are going to set up Samba BDC. > Please keep in mind that Samba "exercise" LDAP directory pretty hard. > Also think about > having redundant setup - multiple LDAP replicas with a load balancer > (hardware or software).
Samba 3.0 just got a lot better in that regard, but yes, we do hit LDAP pretty hard. (We now cache connections, avoid unnecessary writes and don't go Get_Pwnam() on each returned entry). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
