Re: [SOGo] AD integration so users can be provisioned in AD

2012-12-13 Thread Sven Tegethoff 

On 13.12.2012 00:23, romain wrote:

 - Move the schema owner to your new Samba4 controller

Add this line to your samba4 smb.conf in the global section :
 dsdb:schema update allowed = true


Just as a note - if you can't (or don't want) to move the schema master 
role to samba4 for whatever reason, you can employ a trick to get the 
schema update you need. Download the free trial version of Exchange 
Server 2007 and run setup /ps on the windows domain controller. This 
will install the schema extensions without installing any software. The 
openchange provision script will detect that the schema extension is 
already there and skip that step.


Best Regards,

Sven

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] AD integration so users can be provisioned in AD

2012-12-12 Thread romain 

Hi,

This is what I want since the first release of SOGo v2 :-)

And yes, It works, but need some testing again.

Here is how I dit it :
 - Install Samba 4 and OpenChange
 - Join Samba4 as a DC on your Active Directory domain
 - Start Samba4 daemon and let Active Directory to synchronise (30' to 
2hours)

 - Move the schema owner to your new Samba4 controller

Add this line to your samba4 smb.conf in the global section :
 dsdb:schema update allowed = true

- Stop  Start your Samba4 with this configuration.
- Run openchange_provision to update the Schema need by OpenChange
- Stop  Start your Samba4 again and let Active Directory to synchronise 
again (30' to 2hours) (cause Schema Update by OpenChange).


Follow the other steps with the how-to at OpenChange or SOGo sites.

Regards,
MARIADASSOU Romain


Le 12/12/2012 23:47, John Kenyon a écrit :

Hi All,

I haven't tested SOGo since v.2.0.0, but I remember there was still work to do 
regarding better AD integration - so users can be provisioned in AD, and Samba 
4 be joined to the existing AD domain.

Has anyone had any luck getting this to work?

Also Samba4 stable was released the other day (11th Dec).

Cheers,

John


--
users@sogo.nu
https://inverse.ca/sogo/lists