Koozali.org: home of the SME Server

Going to set up a new business network - what about Active Directory?

Offline weblance

  • ****
  • 95
  • +0/-0
Hi

I'm about to setup an new network at work. We are currently running MS Server 2003 and would like to completely replace it with a SME Server. My question is what about Active Directory? We have 8 workstations right now and will be at 10 all connecting to a Windows Domain. I've read here: http://wiki.contribs.org/Advanced_Samba - that SME can be an AD controller. Is it safe to use?

Which setup should I use? We'll need a fileserver, mailserver and webserver. We also need to connect to the server via VPN. All this is provided out-of-the-box and I know how to setup the SME Server, but I'm in doubt about the AD.

Thanks in advance!

/Carl

Offline chris burnat

  • *****
  • 1,135
  • +2/-0
    • http://www.burnat.com
Re: Going to set up a new business network - what about Active Directory?
« Reply #1 on: November 15, 2010, 10:13:54 PM »
Moving to general discussions - advanced samba package are not part of sme 7.xx ISO.
- chris
If it does not work out of the box, please fill in a Bug Report @ Bugzilla (http://bugs.contribs.org)  - check: http://wiki.contribs.org/Bugzilla_Help .  Thanks.

Offline MSmith

  • *
  • 675
  • +0/-0
Re: Going to set up a new business network - what about Active Directory?
« Reply #2 on: November 16, 2010, 06:43:17 AM »
I'd split those up into two boxes.  Use Windows Server 2003 for the fileserver, just for shadow copy.  (Yes, I know it can be made to work in SME 7.5, but I've never done so and don't know if it will even be possible in SME 8.  But shadow copy is fantastic.)  For the mailserver & webserver ... SME is superb.
...

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: Going to set up a new business network - what about Active Directory?
« Reply #3 on: November 16, 2010, 06:53:31 AM »
weblance

Quote
....what about Active Directory? We have 8 workstations right now and will be at 10 all connecting to a Windows Domain. I've read here: http://wiki.contribs.org/Advanced_Samba - that SME can be an AD controller. Is it safe to use?

Did you read all of that document thoroughly ?
Much of it is stated as offering preliminary (functionality) support and with limited implementation.
Read carefully before jumping in with great expectations.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline fpausp

  • *
  • 728
  • +0/-0
Re: Going to set up a new business network - what about Active Directory?
« Reply #4 on: November 16, 2010, 06:28:07 PM »
Hi,

I have read http://wiki.contribs.org/Advanced_Samba.

Quote
Active Directory domain controller
   Warning:
   Preliminary support for this server role only. Do not attempt to deploy this server role on SME Server unless you are very experienced with SME Server.

SME Server support for this server role is coming soon.

Does anybody know how long it takes ?
Viribus unitis

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: Going to set up a new business network - what about Active Directory?
« Reply #5 on: November 16, 2010, 07:16:44 PM »
Does anybody know how long it takes ?
No and I doubt there is an estimate. Contact the author, perhaps he knows or can use some sponsoring to continue or speed it up.
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)

Offline idp_qbn

  • *****
  • 347
  • +0/-0
Re: Going to set up a new business network - what about Active Directory?
« Reply #6 on: November 16, 2010, 07:26:21 PM »
Weblance
Ask yourself "Why do I want Active Directory?".

It is a Microsoft management tool and a very good one, too - if you are running a Windows Server. It provides the functionality needed to manage large (huge!) domains.

SME and Samba provide a full Domain Controller functionality (as it used to be in the old Windows NT days). This is more than adequate for managing small domains - and 10 workstations is a small domain. Security policies can be set on the Domain Controller (in this case SME).

From your original description, I think you have simple system requirements - fileserver, mailserver, webserver. SME does that beautifully.

You also need to handle logins and control access - it is all there in SME. I use an addon (contrib) called Smeserver-tw-logonscript (look in the Wiki/Contribs page). I am not the developer - just a user. The addon allows you to map Windows drive letters to SME Samba shares -depending on the groups the user belongs to.

Here is the original announcement of the package from the forums: http://tinyurl.com/37pck9h

Remember - your problem is really "Can I replace a Windows 2003 server with an SME server and still have an easily managed network?" NOT "Can SME server run AD?"
And the answer is YES.

Another suggestion: set up an AFFA server for backup. (http://wiki.contribs.org/Affa)
This is a brilliant piece of work - it is an addon for SMEserver which does scheduled backups (and allows retrieval of deleteted items still in the backup cycle) AND is a lifesaver if the main system goes down. An AFFA server can be "risen" to become a fully functional clone of the main server in minutes - including all user data. I have used this a couple of times and the longest it took for 500Gb+ was less than half an hour. Try that with a Windows server!

Cheers
Ian
___________________
Sydney, NSW, Australia

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: Going to set up a new business network - what about Active Directory?
« Reply #7 on: November 17, 2010, 12:10:57 AM »
MSmith, weblance et al

SME supports Shadow Copy see
http://wiki.contribs.org/ShadowCopy

There is also support for a Recycle bin
http://wiki.contribs.org/RecycleBin

Quote
I'd split those up into two boxes.  Use Windows Server 2003 for the fileserver, just for shadow copy.  (Yes, I know it can be made to work in SME 7.5, but I've never done so and don't know if it will even be possible in SME 8.  But shadow copy is fantastic.)  For the mailserver & webserver ... SME is superb.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline weblance

  • ****
  • 95
  • +0/-0
Re: Going to set up a new business network - what about Active Directory?
« Reply #8 on: November 17, 2010, 08:09:02 AM »
Weblance
Ask yourself "Why do I want Active Directory?".

It is a Microsoft management tool and a very good one, too - if you are running a Windows Server. It provides the functionality needed to manage large (huge!) domains.

SME and Samba provide a full Domain Controller functionality (as it used to be in the old Windows NT days). This is more than adequate for managing small domains - and 10 workstations is a small domain. Security policies can be set on the Domain Controller (in this case SME).

From your original description, I think you have simple system requirements - fileserver, mailserver, webserver. SME does that beautifully.

You also need to handle logins and control access - it is all there in SME. I use an addon (contrib) called Smeserver-tw-logonscript (look in the Wiki/Contribs page). I am not the developer - just a user. The addon allows you to map Windows drive letters to SME Samba shares -depending on the groups the user belongs to.

Here is the original announcement of the package from the forums: http://tinyurl.com/37pck9h

Remember - your problem is really "Can I replace a Windows 2003 server with an SME server and still have an easily managed network?" NOT "Can SME server run AD?"
And the answer is YES.

Another suggestion: set up an AFFA server for backup. (http://wiki.contribs.org/Affa)
This is a brilliant piece of work - it is an addon for SMEserver which does scheduled backups (and allows retrieval of deleteted items still in the backup cycle) AND is a lifesaver if the main system goes down. An AFFA server can be "risen" to become a fully functional clone of the main server in minutes - including all user data. I have used this a couple of times and the longest it took for 500Gb+ was less than half an hour. Try that with a Windows server!

Cheers
Ian

FANTASTIC my friend. You hit the target spot on. This is exactly what i need and want. Thank you very much.

/Carl

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: Going to set up a new business network - what about Active Directory?
« Reply #9 on: November 17, 2010, 06:54:35 PM »
FANTASTIC my friend. You hit the target spot on. This is exactly what i need and want. Thank you very much.

/Carl
That is the reason we ask people to describe their problem or desire in the forums and not the desired solution as there might be a good alternative for their issue. :-)
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)