[Samba] About NAS versus Samba

2013-07-28 Thread Olivier BILHAUT

Hi !

QNAP TurboNas (our model number is TS-EC1279U-RP) do successfully the 
trick. Joined as a member to our S4 AD, we use it as a cifs server in a 
mixed environnement.  The server is ssh opened, and the configuration 
files (ex : smb.conf) could be modified by hand or by an automated 
script. We've linked it to our group creation and actually offer good 
and simple services.


Cheers,

---
*** Oliver

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-14 Thread Andrew Bartlett
On Fri, 2013-07-12 at 11:55 -0300, Fernando Lozano wrote:
 Hi Andrew,
 
  I work on a NAS product myself, and at this vendor and my previous 
  vendor Samba 4.0 as an AD DC was all I ever needed to use to test the 
  AD integration features of the NAS. Thanks, Andrew Bartlett 
 Please tell me which product this is, so I can contact the local 
 reseller. :-) You can send me in pvt if you think it would not be 
 ethical to advertise your employee on the list.

 If I someone tell me this product works I can by knowing if something 
 bad happens it's something I can solve. Sometimes the management 
 interface for a product won't let you do things the embebed software 
 could do, so I don't want to risk a product without someone telling me 
 this one worked for me.

My point was more that Samba 4.0 as an AD DC really is AD, certainly for
as much as a NAS cares about.  As discussed, most of these devices are
Samba based anyway, and Samba talks very well to our Samba AD DC.

The difference is with Samba's 'classic' domain mode (Samba 3.x),
because we use a different config option for that.  Some vendors do not
expose this functionality. 

That said, it isn't a secret that I work on the NETGEAR ReadyNAS.  

Previously I worked on the now discontinued Cisco Small Buisness NAS
product.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-13 Thread Nico Kadel-Garcia
On Wed, Jul 10, 2013 at 9:44 PM, Fernando Lozano ferna...@lozano.eti.br wrote:
 Hi there,

 Has anyone tried to configure a NAS server to authenticate users using a
 Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA server?

Given choices, I used NFS. Samba is great for cross compatibility, but
CIFS is a very chatty protocol with some longstanding complexities
leading to awkward access control in my experience.

That said, I've built a render cluster with 200 nodes running a 40
TByte storage setup with Samba 3.x for the Windows clients and NFSv3
for the SuSE users. It worked much better than the commercially funded
storage array. (Ran headlong into the 2 TByte storage size issue due
to 32-bit fiber optic controllers, but split it into 4 10 TByte
arays.)

I also did the first published ports of Samba to SunOS 4.1.x, so I've
done a *lot* of setups.
 I'm evaluating replacing some Linux file server for a NAS product, but
 all them make me nervous when the vendor talks about Active Directory
 support and nothing else.

 In theory, many NASes are Linux boxes running samba, so there shouldn't
 be a problem, except if the web admin interface won't support a samba DC
 setup and I won't have SSH access to configure the NAS samba myself.

 So I'm asking if someone there has had any real experience, be it using
 Fedora, CentOS or RHEL as the Samba3 PDC or Samba4 DC.

More building them up from scartch as part of other services. For
commercial NAS support, I've been dealing a lot with NetApp, which
incorporates a lot of the mirroring and snapshots and high performance
issues an off the shefl USB disk storage box won't have. Those do play
nicely with Samba, AD, and usually NIS as well.

 PS: I'm cross-posting because I asked before on the samba mailing list
 and nobody cared to answer. Or nobody has had any real experience. I'm
 hoing many sysadmins on the Fedora list also works on companies with
 RHEL or CentOS and had a real experience to share.


 []s, Fernando Lozano

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-12 Thread Daniel Müller
Mostly All the NAS Vendors that belong to the linux side have samba3 winbind
running
pointing in their config to ads:

Ex.:
security = ADS
something like this..
winbind enum users = Yes
   winbind enum groups = Yes
   winbind use default domain = Yes
   winbind nested groups = Yes
   winbind separator = +

But in the first run you have to talk to them. Now and then you can buy the
nas with a possibility to join
to your samba3 domain.

If you haven' t tried you will never know :-)
Good Luck
Daniel
---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von Gaiseric Vandal
Gesendet: Donnerstag, 11. Juli 2013 18:44
An: samba@lists.samba.org
Betreff: Re: [Samba] About NAS versus Samba

On 07/11/13 12:29, Fernando Lozano wrote:
 Hi,

 what about the samba running on your NAS. I did a lot of NAS hacking 
 pointing  a running samba/winbind config of the vendor to my nt-style 
 samba/ldap domain .
 But if you do so be aware you are loosing your support :-).
 So if you can change the samba on your NAS you are up and running.
 I don't have the NAS box yet. I wish advice on which one to buy based 
 on compatibility with a Samba 3 PDC (or Samba 4 DC, or IPA).

 Vendors I talked to tell me it won't work, I'd have to use Microsoft 
 AD.  Knowing the Linux and Windows side (protocols, software) this 
 doesn't make sense to me, I'm guessing the sales people I talked to 
 simply doesn't know and doesn't want to learn.

 And it's not easy to tell the boss I'll buy a somewhat expensive box 
 (for a small business) just to hack and see if it'll work the way I 
 want. :-(

 It would help if you simply tell me which NAS you had success and 
 which one was easier, out-of-the-box, or had to hack.


 []s, Fernando Lozano


It seems common that vendors (esp the sales guys) assume you are running 
Windows 200x and AD.I think the logic is that none of our customers 
use linux so we won't support it. It becomes self-fulfilling when 
anyone wanting something besides the basic Windows AD support looks for
other solutions.

Getting samba to work sometimes requires fiddling with protocol 
versions, WINS and DNS.  For example windows 7 won't work with Samba 
3.x until you tweek the registry.   You can probably put together a 
price-comparable equivalent of the Buffalo using a white-box PC tower 
and linux.  You can even set up software raid.   It is more likely 
to work the way you want than a NAS box.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-12 Thread Jim Potter
I use a Netgear readynas1500 as a fileserver for my Samba3/ldap domain 
which I' ve just upgraded to AD and it works fine in both cases (lots of 
users, though with relatively few active connections). It runs a bog 
standard Samba3 + winbind member server (NT or ADS) as far as I can tell.


Having said that, the 2 shortcomings I have found are with windows 7 
clients...  troubles doing offline files (there are  bunch of tweaks, 
but none work perfectly) and it doesnt work too well with the libraries 
feature in win7 (it needs indexing o some sort that isn't povided by 
samba I think)


BTW, would a Samba4 member server setup help with these issues? If it 
did, I'd upgrade even if it did invaidate warranty...


cheers

Jim

On 11/07/2013 05:03, ferna...@lozano.eti.br wrote:

Hi Cris,


Hi there, Has anyone tried to configure a NAS server to authenticate
users using a Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA
server?


not in a while, but I have done a samba 3 DC


This was not my question. I'm ok running samba 3 DCs. :-)

Have you ever configured a NAS so it would authenticate users from 
your Samba DC and them serve SMB file shares (aka network drives) to 
Windows desktops?




I'm evaluating replacing some Linux file server for a NAS product, but
all them make me nervous when the vendor talks about Active Directory
support and nothing else.


if 3rd party support is your concern, why are you using fedora 
instead of

RHEL?


Are you trying to sell me RHEL subscriptions or help me with my 
question? ;-) Anything wrong about asking about Fedora on a Fedora 
list, or any server issue is forbidden for Fedora users? ;-)


AFAIK it shouldn't matter, from a technical perspective, if the samba 
DC runs Fedora, Debian, Slackware, RHEL, SuSE, Ubuntu, Solaris, 
whatever. I am not talking about OS level FC drivers or iSCSI 
initiators. Either a NAS will be compatible with Samba3, Samba4, both 
or neither. This depends on the SMB and MSRPC features needed by the 
NAS, all them application level protocols, not kernel modules. If I'll 
need Red Hat support for managing this system is another, unrelated, 
question.


If the NAS vendors state they suṕport RHEL, that's not que question 
either, as supporting RHEL could mean the RHEL linux kernel smbfs and 
cifsfs driver talks to the NAS, not the NAS talks to the Samba DC. Or 
else, RHEL support may mean just that the NAS talks NFS and so a RHEL 
machine can mount volumes from tne NAS. That's not what I want.


Most times I see linux servers they are simply members of a MSAD 
domain, not the DC themselves. But mine are. All vendors I talked to 
assume MSAD, and don't know about Samba. :-(


Anyway Fedora is my desktop system and development workstation. The DC 
in question runs RHEL. But if this works I can try someday using 
Fedora or CentOS with the same (or other) NAS.




In theory, many NASes are Linux boxes running samba, so there

shouldn't be a problem, except if the web admin interface won't support
a samba DC setup and I won't have SSH access to configure the NAS samba
myself



a cheaper nas will probably use samba, but not all NASs do. there are
several commercial SMB/CIFS implementation out there.


At least iomega/lenovo/emc state their NAS runs Samba. And a lot of 
less know vendors also. I'll buy a single, cheap NAS, not a high end 
EMC rack full of boxes. :-)


But... will any NAS you know work with a Samba DC, or else, using an 
IPA server? Or will they only work with Microsoft Windows Server AD?


All vendors I contacted talk only about MS Active Directory. They 
don't even know about NT4-style domains, which would mean a Samba3 DC 
should work. Besides, AFAIK a Samba4 DC isn't supported by RHEL at all 
-- that's why I included IPA in my question -- I'd have to use Sernet 
packages for Samba4. Even then, Samba4 is very new, I don't know if a 
NAS implementation would accept it in place of a MSAD DC.


Most vendors talk to me about vmware, exchange and sql server support. 
They offer me windows-only backup servers and the like. Some even 
offer me SAP R/3 agents, while my ERP is another one. They can only 
follow their standard script for windows shops. So I ask for the 
collective knowledge from the Fedora and Samba lists... can anyone 
tell me I tried this NAS and it worked? Or should I better forget 
about this and keep using cheap intel boxes as file servers?


Am I the first linux sysadmin in the world who's considering to have a 
NAS replacing some file servers but keeping his samba DCs?



[]s, Fernando Lozano



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] About NAS versus Samba

2013-07-12 Thread L . P . H . van Belle
quote:
 I'm evaluating replacing some Linux file server for a NAS 
product, but
 all them make me nervous when the vendor talks about 
Active Directory
 support and nothing else.

Its simple, this is a BAD thing tot do. 
But if you really want a nas. 

Get a synology. 
The best you can get, is my experiance. 
http://www.synology.com/index.php?lang=default 

or 
Just get a pc with 2 harddisks and install. 
http://www.freenas.org/

or if you want a ready setup for samba4 . 
get the sernet samba4 appliance.
http://www.enterprisesamba.com/samba4app/ 

My advice, get or the synoligy of the samba4 app. 

personaly, get the samba4 appliance. 
get zarafa, and you have about the samba as Windows + exchange 

Im running samba 3 with zarafa now, and im in the process of upgradeing to 
samba4. 

Good luck. 

Louis




-Oorspronkelijk bericht-
Van: jimpot...@orange.net 
[mailto:samba-boun...@lists.samba.org] Namens Jim Potter
Verzonden: vrijdag 12 juli 2013 8:44
Aan: samba@lists.samba.org
Onderwerp: Re: [Samba] About NAS versus Samba

I use a Netgear readynas1500 as a fileserver for my Samba3/ldap domain 
which I' ve just upgraded to AD and it works fine in both 
cases (lots of 
users, though with relatively few active connections). It runs a bog 
standard Samba3 + winbind member server (NT or ADS) as far as 
I can tell.

Having said that, the 2 shortcomings I have found are with windows 7 
clients...  troubles doing offline files (there are  bunch of tweaks, 
but none work perfectly) and it doesnt work too well with the 
libraries 
feature in win7 (it needs indexing o some sort that isn't povided by 
samba I think)

BTW, would a Samba4 member server setup help with these issues? If it 
did, I'd upgrade even if it did invaidate warranty...

cheers

Jim

On 11/07/2013 05:03, ferna...@lozano.eti.br wrote:
 Hi Cris,

 Hi there, Has anyone tried to configure a NAS server to 
authenticate
 users using a Samba PDC, or even a Samba4 DC 
(AD-compatible) or an IPA
 server?

 not in a while, but I have done a samba 3 DC

 This was not my question. I'm ok running samba 3 DCs. :-)

 Have you ever configured a NAS so it would authenticate users from 
 your Samba DC and them serve SMB file shares (aka network drives) to 
 Windows desktops?


 I'm evaluating replacing some Linux file server for a NAS 
product, but
 all them make me nervous when the vendor talks about 
Active Directory
 support and nothing else.

 if 3rd party support is your concern, why are you using fedora 
 instead of
 RHEL?

 Are you trying to sell me RHEL subscriptions or help me with my 
 question? ;-) Anything wrong about asking about Fedora on a Fedora 
 list, or any server issue is forbidden for Fedora users? ;-)

 AFAIK it shouldn't matter, from a technical perspective, if 
the samba 
 DC runs Fedora, Debian, Slackware, RHEL, SuSE, Ubuntu, Solaris, 
 whatever. I am not talking about OS level FC drivers or iSCSI 
 initiators. Either a NAS will be compatible with Samba3, 
Samba4, both 
 or neither. This depends on the SMB and MSRPC features needed by the 
 NAS, all them application level protocols, not kernel 
modules. If I'll 
 need Red Hat support for managing this system is another, unrelated, 
 question.

 If the NAS vendors state they su???port RHEL, that's not que 
question 
 either, as supporting RHEL could mean the RHEL linux kernel 
smbfs and 
 cifsfs driver talks to the NAS, not the NAS talks to the 
Samba DC. Or 
 else, RHEL support may mean just that the NAS talks NFS and 
so a RHEL 
 machine can mount volumes from tne NAS. That's not what I want.

 Most times I see linux servers they are simply members of a MSAD 
 domain, not the DC themselves. But mine are. All vendors I talked to 
 assume MSAD, and don't know about Samba. :-(

 Anyway Fedora is my desktop system and development 
workstation. The DC 
 in question runs RHEL. But if this works I can try someday using 
 Fedora or CentOS with the same (or other) NAS.


 In theory, many NASes are Linux boxes running samba, so there
 shouldn't be a problem, except if the web admin interface 
won't support
 a samba DC setup and I won't have SSH access to configure 
the NAS samba
 myself


 a cheaper nas will probably use samba, but not all NASs do. 
there are
 several commercial SMB/CIFS implementation out there.

 At least iomega/lenovo/emc state their NAS runs Samba. And a lot of 
 less know vendors also. I'll buy a single, cheap NAS, not a high end 
 EMC rack full of boxes. :-)

 But... will any NAS you know work with a Samba DC, or else, using an 
 IPA server? Or will they only work with Microsoft Windows Server AD?

 All vendors I contacted talk only about MS Active Directory. They 
 don't even know about NT4-style domains, which would mean a 
Samba3 DC 
 should work. Besides, AFAIK a Samba4 DC isn't supported by 
RHEL at all 
 -- that's why I included IPA in my question -- I'd have to 
use Sernet 
 packages for Samba4. Even then, Samba4 is very new, I don't 
know if a 
 NAS

Re: [Samba] About NAS versus Samba

2013-07-12 Thread Gaiseric Vandal
With Samba 3.x (I think it was samba 3.4.x when we started deploying 
Windows 7)  I found that offline folders on Windows 7 broke offline 
authentication.



On 07/12/13 02:43, Jim Potter wrote:
I use a Netgear readynas1500 as a fileserver for my Samba3/ldap domain 
which I' ve just upgraded to AD and it works fine in both cases (lots 
of users, though with relatively few active connections). It runs a 
bog standard Samba3 + winbind member server (NT or ADS) as far as I 
can tell.


Having said that, the 2 shortcomings I have found are with windows 7 
clients...  troubles doing offline files (there are  bunch of tweaks, 
but none work perfectly) and it doesnt work too well with the 
libraries feature in win7 (it needs indexing o some sort that isn't 
povided by samba I think)


BTW, would a Samba4 member server setup help with these issues? If it 
did, I'd upgrade even if it did invaidate warranty...


cheers

Jim

On 11/07/2013 05:03, ferna...@lozano.eti.br wrote:

Hi Cris,


Hi there, Has anyone tried to configure a NAS server to authenticate
users using a Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA
server?


not in a while, but I have done a samba 3 DC


This was not my question. I'm ok running samba 3 DCs. :-)

Have you ever configured a NAS so it would authenticate users from 
your Samba DC and them serve SMB file shares (aka network drives) to 
Windows desktops?




I'm evaluating replacing some Linux file server for a NAS product, but
all them make me nervous when the vendor talks about Active Directory
support and nothing else.


if 3rd party support is your concern, why are you using fedora 
instead of

RHEL?


Are you trying to sell me RHEL subscriptions or help me with my 
question? ;-) Anything wrong about asking about Fedora on a Fedora 
list, or any server issue is forbidden for Fedora users? ;-)


AFAIK it shouldn't matter, from a technical perspective, if the samba 
DC runs Fedora, Debian, Slackware, RHEL, SuSE, Ubuntu, Solaris, 
whatever. I am not talking about OS level FC drivers or iSCSI 
initiators. Either a NAS will be compatible with Samba3, Samba4, both 
or neither. This depends on the SMB and MSRPC features needed by the 
NAS, all them application level protocols, not kernel modules. If 
I'll need Red Hat support for managing this system is another, 
unrelated, question.


If the NAS vendors state they suṕport RHEL, that's not que question 
either, as supporting RHEL could mean the RHEL linux kernel smbfs and 
cifsfs driver talks to the NAS, not the NAS talks to the Samba DC. Or 
else, RHEL support may mean just that the NAS talks NFS and so a RHEL 
machine can mount volumes from tne NAS. That's not what I want.


Most times I see linux servers they are simply members of a MSAD 
domain, not the DC themselves. But mine are. All vendors I talked to 
assume MSAD, and don't know about Samba. :-(


Anyway Fedora is my desktop system and development workstation. The 
DC in question runs RHEL. But if this works I can try someday using 
Fedora or CentOS with the same (or other) NAS.




In theory, many NASes are Linux boxes running samba, so there
shouldn't be a problem, except if the web admin interface won't 
support
a samba DC setup and I won't have SSH access to configure the NAS 
samba

myself



a cheaper nas will probably use samba, but not all NASs do. there are
several commercial SMB/CIFS implementation out there.


At least iomega/lenovo/emc state their NAS runs Samba. And a lot of 
less know vendors also. I'll buy a single, cheap NAS, not a high end 
EMC rack full of boxes. :-)


But... will any NAS you know work with a Samba DC, or else, using an 
IPA server? Or will they only work with Microsoft Windows Server AD?


All vendors I contacted talk only about MS Active Directory. They 
don't even know about NT4-style domains, which would mean a Samba3 DC 
should work. Besides, AFAIK a Samba4 DC isn't supported by RHEL at 
all -- that's why I included IPA in my question -- I'd have to use 
Sernet packages for Samba4. Even then, Samba4 is very new, I don't 
know if a NAS implementation would accept it in place of a MSAD DC.


Most vendors talk to me about vmware, exchange and sql server 
support. They offer me windows-only backup servers and the like. Some 
even offer me SAP R/3 agents, while my ERP is another one. They can 
only follow their standard script for windows shops. So I ask for the 
collective knowledge from the Fedora and Samba lists... can anyone 
tell me I tried this NAS and it worked? Or should I better forget 
about this and keep using cheap intel boxes as file servers?


Am I the first linux sysadmin in the world who's considering to have 
a NAS replacing some file servers but keeping his samba DCs?



[]s, Fernando Lozano





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] About NAS versus Samba

2013-07-12 Thread Fernando Lozano

Hi,


Its simple, this is a BAD thing tot do.
But if you really want a nas.
As a technician I can agree, but I ceased trying to explain to 
management. Hey, we must help hardware vendor personal have a living ;-) 
and they help us put more expertise areas in our own resume. ;-)))




Get a synology.
The best you can get, is my experiance.


Thanks a lot. I hope not only best as a NAS but also easy to setup as a 
member server for a samba 3 or 4 domain, right?




Just get a pc with 2 harddisks and install.
http://www.freenas.org/
Risking being off-topic on this list, many people told me not to use 
freenas because it was unmantained. Do you actually use it, follow the 
project closely, or just heard about it?




personaly, get the samba4 appliance.
I have to use my RHEL subscriptions ;-) Will use sernet packages when I 
get to upgrade to samba4.




get zarafa, and you have about the samba as Windows + exchange
Already have Zimbra. Someday I'll research about integrating Zimbra LDAP 
to Samba 4 LDAP. Won't try with Samba 3 because I hope to upgrade to 
samba4 this year.



[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-12 Thread Fernando Lozano

Hi Andrew,

I work on a NAS product myself, and at this vendor and my previous 
vendor Samba 4.0 as an AD DC was all I ever needed to use to test the 
AD integration features of the NAS. Thanks, Andrew Bartlett 
Please tell me which product this is, so I can contact the local 
reseller. :-) You can send me in pvt if you think it would not be 
ethical to advertise your employee on the list.


Sales people here (and their technical consultants) don't know / don't 
care about Samba. Every time I ask about samba compatibility they try to 
sell me Windows and VmWare licenses. They even lie trying to make my 
employee buy those licenses and ditch Linux altogether.


I am only saved because of some previous incidents where I told my boss 
either they are lying or they don't know, showing technical references 
from vendors themselves and standards bodies, but was overruled. Later 
my boss found I was right the had way: products didn't worked as 
expected, company lost money.


Most non-IT people, even many IT people, wrongly believe the vendor 
people should be the better experts and so any conflict of opinion they 
should be right. When it fails, the IT manager or the business area 
manager hide it, so they don't take blame for the wrong decision 
consequences. :-(


If I someone tell me this product works I can by knowing if something 
bad happens it's something I can solve. Sometimes the management 
interface for a product won't let you do things the embebed software 
could do, so I don't want to risk a product without someone telling me 
this one worked for me.



[]s, Fernando Lozano
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Daniel Müller
Hi,
what about the samba running on your NAS. I did a lot of NAS hacking pointing  
a running samba/winbind config of the vendor to my nt-style samba/ldap domain .
But if you do so be aware you are loosing your support :-).
So if you can change the samba on your NAS you are up and running.

Greetings
Daniel

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im 
Auftrag von ferna...@lozano.eti.br
Gesendet: Donnerstag, 11. Juli 2013 06:04
An: Chris Weiss
Cc: samba; us...@lists.fedoraproject.org
Betreff: Re: [Samba] About NAS versus Samba

Hi Cris,

 Hi there, Has anyone tried to configure a NAS server to authenticate 
 users using a Samba PDC, or even a Samba4 DC (AD-compatible) or an 
 IPA server?

 not in a while, but I have done a samba 3 DC

This was not my question. I'm ok running samba 3 DCs. :-)

Have you ever configured a NAS so it would authenticate users from your Samba 
DC and them serve SMB file shares (aka network drives) to Windows desktops?


 I'm evaluating replacing some Linux file server for a NAS product, 
 but all them make me nervous when the vendor talks about Active 
 Directory support and nothing else.

 if 3rd party support is your concern, why are you using fedora instead 
 of RHEL?

Are you trying to sell me RHEL subscriptions or help me with my question? ;-) 
Anything wrong about asking about Fedora on a Fedora list, or any server issue 
is forbidden for Fedora users? ;-)

AFAIK it shouldn't matter, from a technical perspective, if the samba DC runs 
Fedora, Debian, Slackware, RHEL, SuSE, Ubuntu, Solaris, whatever. I am not 
talking about OS level FC drivers or iSCSI initiators. Either a NAS will be 
compatible with Samba3, Samba4, both or neither. This depends on the SMB and 
MSRPC features needed by the NAS, all them application level protocols, not 
kernel modules. If I'll need Red Hat support for managing this system is 
another, unrelated, question.

If the NAS vendors state they suṕport RHEL, that's not que question either, as 
supporting RHEL could mean the RHEL linux kernel smbfs and cifsfs driver talks 
to the NAS, not the NAS talks to the Samba DC. Or else, RHEL support may mean 
just that the NAS talks NFS and so a RHEL machine can mount volumes from tne 
NAS. That's not what I want.

Most times I see linux servers they are simply members of a MSAD domain, not 
the DC themselves. But mine are. All vendors I talked to assume MSAD, and don't 
know about Samba. :-(

Anyway Fedora is my desktop system and development workstation. The DC in 
question runs RHEL. But if this works I can try someday using Fedora or CentOS 
with the same (or other) NAS.


 In theory, many NASes are Linux boxes running samba, so there
 shouldn't be a problem, except if the web admin interface won't 
 support a samba DC setup and I won't have SSH access to configure the 
 NAS samba myself


 a cheaper nas will probably use samba, but not all NASs do. there are 
 several commercial SMB/CIFS implementation out there.

At least iomega/lenovo/emc state their NAS runs Samba. And a lot of less know 
vendors also. I'll buy a single, cheap NAS, not a high end EMC rack full of 
boxes. :-)

But... will any NAS you know work with a Samba DC, or else, using an IPA 
server? Or will they only work with Microsoft Windows Server AD?

All vendors I contacted talk only about MS Active Directory. They don't even 
know about NT4-style domains, which would mean a Samba3 DC should work. 
Besides, AFAIK a Samba4 DC isn't supported by RHEL at all -- that's why I 
included IPA in my question -- I'd have to use Sernet packages for Samba4. Even 
then, Samba4 is very new, I don't know if a NAS implementation would accept it 
in place of a MSAD DC.

Most vendors talk to me about vmware, exchange and sql server support. 
They offer me windows-only backup servers and the like. Some even offer me SAP 
R/3 agents, while my ERP is another one. They can only follow their standard 
script for windows shops. So I ask for the collective knowledge from the Fedora 
and Samba lists... can anyone tell me I tried this NAS and it worked? Or 
should I better forget about this and keep using cheap intel boxes as file 
servers?

Am I the first linux sysadmin in the world who's considering to have a NAS 
replacing some file servers but keeping his samba DCs?


[]s, Fernando Lozano

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] About NAS versus Samba

2013-07-11 Thread Chris Weiss
On Wed, Jul 10, 2013 at 11:00 PM, Jeremy Allison j...@samba.org wrote:
 but not all NASs do.  there are
 several commercial SMB/CIFS implementation out there.

 Sure, but non available to buy as a software-only
 product to my knowledge. They all come with hardware
 attached :-).

right, *I* can't buy the software, but a NAS vendor can license it for
a product that I can buy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Chris Weiss
On Wed, Jul 10, 2013 at 11:03 PM,  ferna...@lozano.eti.br wrote:
 Hi Cris,


 Hi there, Has anyone tried to configure a NAS server to authenticate
 users using a Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA
 server?


 not in a while, but I have done a samba 3 DC


 This was not my question. I'm ok running samba 3 DCs. :-)

oh but it was!  PDC means NT4 style, so samba PDC means samba 3
domain!  If you're searching for information, this kind of nitpicky
detail is important for an accurate answer.


 Have you ever configured a NAS so it would authenticate users from your
 Samba DC and them serve SMB file shares (aka network drives) to Windows
 desktops?

 I'm evaluating replacing some Linux file server for a NAS product, but
 all them make me nervous when the vendor talks about Active Directory
 support and nothing else.


 if 3rd party support is your concern, why are you using fedora instead of
 RHEL?


 Are you trying to sell me RHEL subscriptions or help me with my question?
 ;-) Anything wrong about asking about Fedora on a Fedora list, or any server
 issue is forbidden for Fedora users? ;-)

I guess it's the IT manager in me.  I either want something that I
make someone else fix, or I want something that I'm probably going to
void the warranty on so I can make it do what I want.


 AFAIK it shouldn't matter, from a technical perspective, [clip]

I agree.  But you're asking questions that show us that you assume
that this is not the case.  If that's your concern, then the disto
you're using is important since they all put in their own patches, or
not, and that's where issues raise.

if you can verify the samba version on the nas, that should have your
answer since those issues are well tracked.  Generally, if it supports
AD, it supports a samba AD.  Bugs are possible, but bugs can also be
fixed.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Bob Bob
Hi Fernando

I have a site that runs 2 trusted domain PDC's across a OpenVPN link. At
one end there is a (older) Buffalo Terrastation NAS. The NAS quite
happily authenticates etc both sets of domain users. It has the option
of Workgroup, NT Domain or AD. I use NT Domain.

The PDC's run on Debian GNU/Linux 6.0.5 (squeeze) Samba 3.56. I use
idmap_tdb winbind of course.

This really is an evolving thing here. There are a few issues that
likewise I have had no response to list questions over.

Am happy to elaborate if you need more info.

Bob

On 11/07/13 11:44, Fernando Lozano wrote:
 Hi there,

 Has anyone tried to configure a NAS server to authenticate users using a
 Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA server?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Fernando Lozano

Hi,


Hi there, Has anyone tried to configure a NAS server to authenticate
users using a Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA
server?

not in a while, but I have done a samba 3 DC

This was not my question. I'm ok running samba 3 DCs. :-)

oh but it was!  PDC means NT4 style, so samba PDC means samba 3
domain!  If you're searching for information, this kind of nitpicky
detail is important for an accurate answer.


Well, I know how to setup a Samba 3 PDC, with other BDCs using LDAP 
replication. Fortunately I do not need help doing this. And I was not 
asking what is a Samba PDC, I know that, I know MSAD and etc


 I'm not asking the IT manager in you and other list members, I'm 
asking the network admins and sysadmins about wich products worked or 
didn't work based on their real-world experience.


My question is wether a NAS (which one) will be able to become a member 
server on the samba NT-style domain, of if it will work only as member 
of a real MSAD domain from a Windows Server. Do you know the answer,


I talked about even a Samba 4 DC because if someone answers me won't 
work for a samba 3 pdc, but should work with a samba 4 DC I'll 
seriously think about moving my test-lab samba 4 setup into production, 
otherwise I was not willing to do this just for the NAS.


I'm even open to IPA, a software I've never tried. It looks like can 
replace my Samba3 DCs with advantes, and is well supported by Red Hat, 
while Samba 4 is not. Today I'd rather run Samba 4 without support than 
learning an entirely new network login solution. But if the new solution 
makes using a NAS easier I may change my mind.



AFAIK it shouldn't matter, from a technical perspective, [Fedora vs RHEL]

I agree.  But you're asking questions that show us that you assume
that this is not the case.  If that's your concern, then the disto
you're using is important since they all put in their own patches, or
not, and that's where issues raise.


For now it only matters to me if sometone tells i tried with ACME NAS 
and RHEL and it worked, but tried the same NAS with Fedora and it 
didn't or vice-versa.  I can compile samba myself if needed, or get 
packages from a repo outisde the official distro ones.




if you can verify the samba version on the nas, that should have your
answer since those issues are well tracked.  Generally, if it supports
AD, it supports a samba AD.  Bugs are possible, but bugs can also be
fixed.
If I had the NAS box here I'd verify. But I'm still evaluating which one 
to buy, and for small purchages / small companies no one gives me a box 
for a POC.


I wish information on with products / vendors have a track record of 
working (or not working) as member servers to a samba 3 domain, so I 
won't loose time talking to those vendors or evaluating those products.


As I said in the previous messages, trying to get this information from 
the vendors themselves was a failure, so I'm appealing to the list.


Unfortunately, as nobody besides you, on both lists, replied to me, I 
must assume that no NAS in the market was ever proven to work using a 
Samba PDC, and so buying any NAS is out of question for me. :-(


Maybe I'll instead buy a DAS box to which I can connect 4 to 8 server 
machines using SAS links, and let the file servers running as samba 
processes inside linux VMs.



[]s, Fernando Lozano


[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Fernando Lozano

Hi Bob,


I have a site that runs 2 trusted domain PDC's across a OpenVPN link. At
one end there is a (older) Buffalo Terrastation NAS. The NAS quite
happily authenticates etc both sets of domain users. It has the option
of Workgroup, NT Domain or AD. I use NT Domain.

The PDC's run on Debian GNU/Linux 6.0.5 (squeeze) Samba 3.56. I use
idmap_tdb winbind of course.

Thanks a lot. I found there is a local reseller here for Buffalo storage 
systems, so it's in.



[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Jeremy Allison
On Thu, Jul 11, 2013 at 08:01:20AM -0500, Chris Weiss wrote:
 On Wed, Jul 10, 2013 at 11:00 PM, Jeremy Allison j...@samba.org wrote:
  but not all NASs do.  there are
  several commercial SMB/CIFS implementation out there.
 
  Sure, but non available to buy as a software-only
  product to my knowledge. They all come with hardware
  attached :-).
 
 right, *I* can't buy the software, but a NAS vendor can license it for
 a product that I can buy.

No, they all write their own these days. None available
to license as far as I'm aware.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Fernando Lozano

Hi,

No, they all write their own these days. None available to license as 
far as I'm aware. 
Most times the proprietary NAS software is simply a web interface over 
a standard Linux/FreeBSD OS using Samba. If you know Samba and Linux, 
the web interface may be a hurdle, not allowing access to features you 
know how to configure from the shell or, worse yet, overwriting those 
settings, if they provide a shell at all.



[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Gaiseric Vandal



On 07/11/13 11:50, Jeremy Allison wrote:

On Thu, Jul 11, 2013 at 08:01:20AM -0500, Chris Weiss wrote:

On Wed, Jul 10, 2013 at 11:00 PM, Jeremy Allison j...@samba.org wrote:

but not all NASs do.  there are
several commercial SMB/CIFS implementation out there.

Sure, but non available to buy as a software-only
product to my knowledge. They all come with hardware
attached :-).

right, *I* can't buy the software, but a NAS vendor can license it for
a product that I can buy.

No, they all write their own these days. None available
to license as far as I'm aware.
I had an small iomega personal/workgroup NAS box (I think it was a 
snapserver.)   It did run linux but the samba version didn't  work with 
our samba 3.x PDC's.I think both were 3.0.x so it could have been 
some issue with our samba implementation.It did work with a Windows 
2003 AD but that wasn't  much use. Some of the NAS's are now based 
on Windows Server.But I don't think any vendor will talk about samba 
compatibility (let alone promise it.) The Oracle/Sun NAS servers are 
based on on Solaris11 or OpenSolaris.


Even if a NAS works with your current environment there is no guarantee 
the vendor will provide patches to keep it working in the future as you 
apply security fixes or patches to your samba servers.For samba 
users implementing a NAS might not simplify things.  If you were a 
windows only show them a NAS is probably great for a small site.   I 
would stick with a real linux/samba server-   you then have complete 
configuration control.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Hoover, Tony
I've had experience with a Western Digital MyBook Live DUO, and it does
NOT support any type of network authentication.  Users must be created and
deleted on that device. 


---
CONFIDENTIALITY WARNING:
Pseudo-legal disclaimers do not buy you or your employer any legal
recourse for leaked information.  E-mail messages should never contain
privileged or confidential information.  Always treat e-mail as
public. 

 
-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of Fernando Lozano
Sent: Wednesday, July 10, 2013 8:45 PM
To: us...@lists.fedoraproject.org; samba@lists.samba.org
Subject: [Samba] About NAS versus Samba

Hi there,

Has anyone tried to configure a NAS server to authenticate users using a
Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA server?

I'm evaluating replacing some Linux file server for a NAS product, but
all them make me nervous when the vendor talks about Active Directory
support and nothing else.

In theory, many NASes are Linux boxes running samba, so there shouldn't
be a problem, except if the web admin interface won't support a samba DC
setup and I won't have SSH access to configure the NAS samba myself.

So I'm asking if someone there has had any real experience, be it using
Fedora, CentOS or RHEL as the Samba3 PDC or Samba4 DC.


PS: I'm cross-posting because I asked before on the samba mailing list
and nobody cared to answer. Or nobody has had any real experience. I'm
hoing many sysadmins on the Fedora list also works on companies with
RHEL or CentOS and had a real experience to share.


[]s, Fernando Lozano

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Fernando Lozano

Hi,


what about the samba running on your NAS. I did a lot of NAS hacking pointing  
a running samba/winbind config of the vendor to my nt-style samba/ldap domain .
But if you do so be aware you are loosing your support :-).
So if you can change the samba on your NAS you are up and running.
I don't have the NAS box yet. I wish advice on which one to buy based on 
compatibility with a Samba 3 PDC (or Samba 4 DC, or IPA).


Vendors I talked to tell me it won't work, I'd have to use Microsoft 
AD.  Knowing the Linux and Windows side (protocols, software) this 
doesn't make sense to me, I'm guessing the sales people I talked to 
simply doesn't know and doesn't want to learn.


And it's not easy to tell the boss I'll buy a somewhat expensive box 
(for a small business) just to hack and see if it'll work the way I 
want. :-(


It would help if you simply tell me which NAS you had success and which 
one was easier, out-of-the-box, or had to hack.



[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Fernando Lozano

Hi Tony,


RE: [Samba] About NAS versus Samba

I've had experience with a Western Digital MyBook Live DUO, and it 
does NOT support any type of network authentication.  Users must be 
created and deleted on that device.




Thanks. May good for home use, but not for my employee.

Anyway a vendor told me this works with linux but was unable to give 
details about authentication.



[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Gaiseric Vandal

On 07/11/13 12:29, Fernando Lozano wrote:

Hi,

what about the samba running on your NAS. I did a lot of NAS hacking 
pointing  a running samba/winbind config of the vendor to my nt-style 
samba/ldap domain .

But if you do so be aware you are loosing your support :-).
So if you can change the samba on your NAS you are up and running.
I don't have the NAS box yet. I wish advice on which one to buy based 
on compatibility with a Samba 3 PDC (or Samba 4 DC, or IPA).


Vendors I talked to tell me it won't work, I'd have to use Microsoft 
AD.  Knowing the Linux and Windows side (protocols, software) this 
doesn't make sense to me, I'm guessing the sales people I talked to 
simply doesn't know and doesn't want to learn.


And it's not easy to tell the boss I'll buy a somewhat expensive box 
(for a small business) just to hack and see if it'll work the way I 
want. :-(


It would help if you simply tell me which NAS you had success and 
which one was easier, out-of-the-box, or had to hack.



[]s, Fernando Lozano



It seems common that vendors (esp the sales guys) assume you are running 
Windows 200x and AD.I think the logic is that none of our customers 
use linux so we won't support it. It becomes self-fulfilling when 
anyone wanting something besides the basic Windows AD support looks for 
other solutions.


Getting samba to work sometimes requires fiddling with protocol 
versions, WINS and DNS.  For example windows 7 won't work with Samba 
3.x until you tweek the registry.   You can probably put together a 
price-comparable equivalent of the Buffalo using a white-box PC tower 
and linux.  You can even set up software raid.   It is more likely 
to work the way you want than a NAS box.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Fernando Lozano

Hi Gaiseric,

It seems common that vendors (esp the sales guys) assume you are 
running Windows 200x and AD.I think the logic is that none of our 
customers use linux so we won't support it. It becomes 
self-fulfilling when anyone wanting something besides the basic 
Windows AD support looks for other solutions.


Exactly my problem. Lasy vendors. ;-)

Getting samba to work sometimes requires fiddling with protocol 
versions, WINS and DNS.  For example windows 7 won't work with 
Samba 3.x until you tweek the registry.   You can probably put 
together a price-comparable equivalent of the Buffalo using a 
white-box PC tower and linux.  You can even set up software 
raid.   It is more likely to work the way you want than a NAS box.
I have no problem with that. Have been doing this for years and my 
employee is happy with the results.


I'm afraid the NAS box won't give access to tweaking its configuration.

But you know, everyone buys NASes today, it's getting harder to explaing 
a common PC would be better. Here a server box with a RAID controller 
and a hot-swappable disk bays is way more expensive than an iomega NAS 
in a rack form factory.



[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Scott Lovenberg
On Thu, Jul 11, 2013 at 12:55 PM, Fernando Lozano
ferna...@lozano.eti.br wrote:

 But you know, everyone buys NASes today, it's getting harder to explaing a
 common PC would be better. Here a server box with a RAID controller and a
 hot-swappable disk bays is way more expensive than an iomega NAS in a rack
 form factory.


I've found the performance of those cheap NAS boxes (even the cheap
ones are relatively expensive) to be sub-par.  Most of them max out at
a few MB/second.  A reasonable set of hardware in a 2U with hot-swap
drives will absolutely smoke a cheap NAS and the price/performance
ratio is much better.  Plus, you can use ZFS/BTRFS/etc as your backing
store if you'd like on your own dedicated box.

--
Peace and Blessings,
-Scott.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Luca Olivetti
Al 11/07/13 18:43, En/na Fernando Lozano ha escrit:
 Hi Tony,
 
 RE: [Samba] About NAS versus Samba

 I've had experience with a Western Digital MyBook Live DUO, and it
 does NOT support any type of network authentication.  Users must be
 created and deleted on that device.


 Thanks. May good for home use, but not for my employee.
 
 Anyway a vendor told me this works with linux but was unable to give
 details about authentication.

If it may interest you, I tried a couple of lacie devices (a 5big and a
network space 2) and, while they use linux+samba, their interface only
allows joining an AD domain. I hacked the network space by replacing
the stock firmware with debian so I could join it to my samba 3 domain.
I didn't bother to modify the 5big (no easy way to do it a the time and
the changes made via a backdoor shell would be reverted on boot), so
we're using it as an unauthenticated data store (for standard software,
catalogues, etc.).

Bye
-- 
Luca Olivetti
Wetron Automation Technology http://www.wetron.es
Tel. +34 935883004  Fax +34 935883007
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Gaiseric Vandal
If you use raid you should either use a true hardware raid (e.g from LSI 
or Adaptec)  or true software raid.  The firmware raid (aka fake raid) 
included on some motherboards is just asking for trouble.For the 
price of the true hardware raid card you might as well stick with 
software raid.


Hot swap bays for SATA disks that you can use with a tower PC fairly cheap.

http://www.supermicro.com/products/accessories/mobilerack/CSE-M35T-1.cfm


Don't cheap out of the disks though.Get 7200 RPM  server or raid disks.

I set up something Solaris which gave me the benefits of ZFS.  If you 
don't need the zfs functionality I would stick with a linux distro that 
are comfortable with.


Supermicro (and other) also was a range for whitebox tower and servers 
that are cheaper than buying from Dell or HP.Of course there is no 
customer support or extended warranty.





On 07/11/13 12:59, Scott Lovenberg wrote:

On Thu, Jul 11, 2013 at 12:55 PM, Fernando Lozano
ferna...@lozano.eti.br wrote:


But you know, everyone buys NASes today, it's getting harder to explaing a
common PC would be better. Here a server box with a RAID controller and a
hot-swappable disk bays is way more expensive than an iomega NAS in a rack
form factory.


I've found the performance of those cheap NAS boxes (even the cheap
ones are relatively expensive) to be sub-par.  Most of them max out at
a few MB/second.  A reasonable set of hardware in a 2U with hot-swap
drives will absolutely smoke a cheap NAS and the price/performance
ratio is much better.  Plus, you can use ZFS/BTRFS/etc as your backing
store if you'd like on your own dedicated box.

--
Peace and Blessings,
-Scott.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-11 Thread Andrew Bartlett
On Thu, 2013-07-11 at 01:03 -0300, ferna...@lozano.eti.br wrote:
 
 But... will any NAS you know work with a Samba DC, or else, using an 
 IPA server? Or will they only work with Microsoft Windows Server AD?

One of the many reasons to upgrade to a Samba 4.0 AD DC is that if a NAS
doesn't work with a Samba 4.0 AD DC, then it's a bug we will fix. 

I work on a NAS product myself, and at this vendor and my previous
vendor Samba 4.0 as an AD DC was all I ever needed to use to test the AD
integration features of the NAS. 

Thanks,

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] About NAS versus Samba

2013-07-10 Thread Fernando Lozano
Hi there,

Has anyone tried to configure a NAS server to authenticate users using a
Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA server?

I'm evaluating replacing some Linux file server for a NAS product, but
all them make me nervous when the vendor talks about Active Directory
support and nothing else.

In theory, many NASes are Linux boxes running samba, so there shouldn't
be a problem, except if the web admin interface won't support a samba DC
setup and I won't have SSH access to configure the NAS samba myself.

So I'm asking if someone there has had any real experience, be it using
Fedora, CentOS or RHEL as the Samba3 PDC or Samba4 DC.


PS: I'm cross-posting because I asked before on the samba mailing list
and nobody cared to answer. Or nobody has had any real experience. I'm
hoing many sysadmins on the Fedora list also works on companies with
RHEL or CentOS and had a real experience to share.


[]s, Fernando Lozano

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-10 Thread Chris Weiss
On Wed, Jul 10, 2013 at 8:44 PM, Fernando Lozano ferna...@lozano.eti.br wrote:
 Hi there,

 Has anyone tried to configure a NAS server to authenticate users using a
 Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA server?

not in a while, but I have done a samba 3 DC

 I'm evaluating replacing some Linux file server for a NAS product, but
 all them make me nervous when the vendor talks about Active Directory
 support and nothing else.

if 3rd party support is your concern, why are you using fedora instead of RHEL?

 In theory, many NASes are Linux boxes running samba, so there shouldn't
 be a problem, except if the web admin interface won't support a samba DC
 setup and I won't have SSH access to configure the NAS samba myself.

a cheaper nas will probably use samba, but not all NASs do.  there are
several commercial SMB/CIFS implementation out there.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-10 Thread Jeremy Allison
On Wed, Jul 10, 2013 at 10:17:56PM -0500, Chris Weiss wrote:
 
 a cheaper nas will probably use samba,

Or a very expensive one :-). Samba is used mainly in the
low end NAS (due to cost), or extremely high end NAS
(due to flexibility for the vendor to make it do *anything* :-)

 but not all NASs do.  there are
 several commercial SMB/CIFS implementation out there.

Sure, but non available to buy as a software-only 
product to my knowledge. They all come with hardware
attached :-).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-10 Thread fernando

Hi Cris,


Hi there, Has anyone tried to configure a NAS server to authenticate
users using a Samba PDC, or even a Samba4 DC (AD-compatible) or an 
IPA

server?


not in a while, but I have done a samba 3 DC


This was not my question. I'm ok running samba 3 DCs. :-)

Have you ever configured a NAS so it would authenticate users from your 
Samba DC and them serve SMB file shares (aka network drives) to Windows 
desktops?



I'm evaluating replacing some Linux file server for a NAS product, 
but
all them make me nervous when the vendor talks about Active 
Directory

support and nothing else.


if 3rd party support is your concern, why are you using fedora 
instead of

RHEL?


Are you trying to sell me RHEL subscriptions or help me with my 
question? ;-) Anything wrong about asking about Fedora on a Fedora list, 
or any server issue is forbidden for Fedora users? ;-)


AFAIK it shouldn't matter, from a technical perspective, if the samba 
DC runs Fedora, Debian, Slackware, RHEL, SuSE, Ubuntu, Solaris, 
whatever. I am not talking about OS level FC drivers or iSCSI 
initiators. Either a NAS will be compatible with Samba3, Samba4, both or 
neither. This depends on the SMB and MSRPC features needed by the NAS, 
all them application level protocols, not kernel modules. If I'll need 
Red Hat support for managing this system is another, unrelated, 
question.


If the NAS vendors state they suṕport RHEL, that's not que question 
either, as supporting RHEL could mean the RHEL linux kernel smbfs and 
cifsfs driver talks to the NAS, not the NAS talks to the Samba DC. Or 
else, RHEL support may mean just that the NAS talks NFS and so a RHEL 
machine can mount volumes from tne NAS. That's not what I want.


Most times I see linux servers they are simply members of a MSAD 
domain, not the DC themselves. But mine are. All vendors I talked to 
assume MSAD, and don't know about Samba. :-(


Anyway Fedora is my desktop system and development workstation. The DC 
in question runs RHEL. But if this works I can try someday using Fedora 
or CentOS with the same (or other) NAS.




In theory, many NASes are Linux boxes running samba, so there
shouldn't be a problem, except if the web admin interface won't 
support
a samba DC setup and I won't have SSH access to configure the NAS 
samba

myself



a cheaper nas will probably use samba, but not all NASs do. there are
several commercial SMB/CIFS implementation out there.


At least iomega/lenovo/emc state their NAS runs Samba. And a lot of 
less know vendors also. I'll buy a single, cheap NAS, not a high end EMC 
rack full of boxes. :-)


But... will any NAS you know work with a Samba DC, or else, using an 
IPA server? Or will they only work with Microsoft Windows Server AD?


All vendors I contacted talk only about MS Active Directory. They don't 
even know about NT4-style domains, which would mean a Samba3 DC should 
work. Besides, AFAIK a Samba4 DC isn't supported by RHEL at all -- 
that's why I included IPA in my question -- I'd have to use Sernet 
packages for Samba4. Even then, Samba4 is very new, I don't know if a 
NAS implementation would accept it in place of a MSAD DC.


Most vendors talk to me about vmware, exchange and sql server support. 
They offer me windows-only backup servers and the like. Some even offer 
me SAP R/3 agents, while my ERP is another one. They can only follow 
their standard script for windows shops. So I ask for the collective 
knowledge from the Fedora and Samba lists... can anyone tell me I tried 
this NAS and it worked? Or should I better forget about this and keep 
using cheap intel boxes as file servers?


Am I the first linux sysadmin in the world who's considering to have a 
NAS replacing some file servers but keeping his samba DCs?



[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba