Re: [Samba] LDAP recommendations please

2013-02-22 Thread ray klassen
Touche. Although my goal is replication, not proxying.



- Original Message -
From: Adam Tauno Williams awill...@whitemice.org
To: samba@lists.samba.org
Cc: 
Sent: Thursday, 21 February 2013, 11:59
Subject: Re: [Samba] LDAP recommendations please

On Thu, 2013-02-21 at 16:36 +, ray klassen wrote:
 Actually I was hoping to use the new internal LDAP as the master.
 I notice that 
 http://www.windowsitpro.com/content1/topic/integrate-active-directory-and-openldap-98449/catpath/ldap
 has an article on using slapd as a proxy to Active Directory.
 This one loks even better. Never used 389Server but there's a first time for 
 everything
 http://www.linuxmail.info/ad-fds-sync-howto/
 (I did google this before I asked the question, but I was searching for 
 samba4 ldap, not active directory ldap. 
 I hope samba4 AD is that similar that I can pull similar stunts to the ones 
 described)
 Upgrading to AD requires that you use our internal LDAP backend.
 https://wiki.samba.org/index.php/Samba4/FAQ

stop with the googling, and just look at the docs.
  https://wiki.samba.org/index.php/Samba4/beyond
  The wiki has an openLDAP proxy to AD section.


-- 
Adam Tauno Williams  GPG D95ED383
Systems Administrator, Python Developer, LPI / NCLA

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] LDAP recommendations please

2013-02-21 Thread Andrew Bartlett
On Wed, 2013-02-20 at 20:50 +, ray klassen wrote:
 Currently I have a samba 3 domain setup with an LDAP backend. It's been very 
 convenient and fault tolerant for me to put read-only replicas of the ldap 
 database on all servers that use LDAP authentication. I'd like to keep doing 
 that after switching to samba 4. Can that be done?

Yes, it can.  However, it will remain a 'classic' domain controller, and
not be an AD domain controller.

Upgrading to AD requires that you use our internal LDAP backend.

https://wiki.samba.org/index.php/Samba4/FAQ

Sorry,

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] LDAP recommendations please

2013-02-21 Thread ray klassen
Actually I was hoping to use the new internal LDAP as the master.


I notice that 
http://www.windowsitpro.com/content1/topic/integrate-active-directory-and-openldap-98449/catpath/ldap
has an article on using slapd as a proxy to Active Directory.

This one looks even better. Never used 389Server but there's a first time for 
everything
http://www.linuxmail.info/ad-fds-sync-howto/

(I did google this before I asked the question, but I was searching for samba4 
ldap, not active directory ldap. 
I hope samba4 AD is that similar that I can pull similar stunts to the ones 
described)



- Original Message -
From: Andrew Bartlett abart...@samba.org
To: ray klassen julius_ahenobar...@yahoo.co.uk
Cc: samba@lists.samba.org samba@lists.samba.org
Sent: Thursday, 21 February 2013, 0:51
Subject: Re: [Samba] LDAP recommendations please

On Wed, 2013-02-20 at 20:50 +, ray klassen wrote:
 Currently I have a samba 3 domain setup with an LDAP backend. It's been very 
 convenient and fault tolerant for me to put read-only replicas of the ldap 
 database on all servers that use LDAP authentication. I'd like to keep doing 
 that after switching to samba 4. Can that be done?

Yes, it can.  However, it will remain a 'classic' domain controller, and
not be an AD domain controller.

Upgrading to AD requires that you use our internal LDAP backend.

https://wiki.samba.org/index.php/Samba4/FAQ

Sorry,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team          http://samba.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] LDAP recommendations please

2013-02-21 Thread Adam Tauno Williams
On Thu, 2013-02-21 at 16:36 +, ray klassen wrote:
 Actually I was hoping to use the new internal LDAP as the master.
 I notice that 
 http://www.windowsitpro.com/content1/topic/integrate-active-directory-and-openldap-98449/catpath/ldap
 has an article on using slapd as a proxy to Active Directory.
 This one loks even better. Never used 389Server but there's a first time for 
 everything
 http://www.linuxmail.info/ad-fds-sync-howto/
 (I did google this before I asked the question, but I was searching for 
 samba4 ldap, not active directory ldap. 
 I hope samba4 AD is that similar that I can pull similar stunts to the ones 
 described)
 Upgrading to AD requires that you use our internal LDAP backend.
 https://wiki.samba.org/index.php/Samba4/FAQ

stop with the googling, and just look at the docs.
  https://wiki.samba.org/index.php/Samba4/beyond
  The wiki has an openLDAP proxy to AD section.


-- 
Adam Tauno Williams  GPG D95ED383
Systems Administrator, Python Developer, LPI / NCLA

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba