Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Sidney on November 05, 2001, 05:31:30 PM

Title: SME v5 as a domain controller
Post by: Sidney on November 05, 2001, 05:31:30 PM
Hello,

  I am running SME v5 and I would like to make it a Primary domain controller. "PDC"
Can this be done?

Also I would like to add a NT 4.0 server as a Backup domain controller. "BDC"
Can this be done?


Any help would be great!

Thanks
Title: Re: SME v5 as a domain controller
Post by: WXP on November 05, 2001, 05:43:33 PM
PDC is done by tell him to do so :)

Just go in the manager and somewhere there is an option to let your sme server be the pdc..
If you want to log on nt 4 machines you wont have any trouble.. but if you want to log on win2000 or winxp machine I suggest you take a look at

http://www.myezserver.com/docs/mitel/samba-upgrade-howto.html

See ya
Title: Re: SME v5 as a domain controller
Post by: Rob Hillis on November 06, 2001, 07:21:06 AM
For info on setting up SMEv5 as a PDC for Win2k machines, see http://www.myezserver.com/docs/mitel/samba-upgrade-howto.html

However, Samba is *not* capable of acting as a BDC.
Title: Re: SME v5 as a domain controller
Post by: Sidney on November 06, 2001, 05:11:27 PM
Thanks WXP and Rob,

I have couple more questions.

could this be done?
If I set my SME to be a PDC with the domain name as e-smith.
Have a Nt 4.0 server login to the e-smith domain?

Does it see the user accouts that is on the SME?

If I added a user account on the Nt Server "BDC" will it automatical add the account to the PDC?

Here is what I am trying to accomplish.
I want to setup an nt 4.0 server as a BDC
and configure it to be a Dial-in server "RAS"
Use the same accounts on the SME.
Title: Re: SME v5 as a domain controller
Post by: WXP on November 06, 2001, 05:36:44 PM
Woooa dude.. Many people here didnt try to make work a PDC Linux and a BDC NT...

I didnt so I couldnt tell ya if It could work... But actually it shouldnt..

See you

ps: Please tell us back if you tried something with (didnt) work..
Title: Re: SME v5 as a domain controller
Post by: Dan Brown on November 06, 2001, 05:42:38 PM
Samba is not currently capable of working as or with a BDC, AFAIK.
Title: Re: SME v5 as a domain controller
Post by: Jochen Hoegerl on November 06, 2001, 05:47:56 PM
Sidney wrote:
>
> Thanks WXP and Rob,
>
> I have couple more questions.
>
> could this be done?
> Does it see the user accouts that is on the SME?
> If I added a user account on the Nt Server "BDC" will it
> automatical add the account to the PDC?
>
> Here is what I am trying to accomplish.
> I want to setup an nt 4.0 server as a BDC
> and configure it to be a Dial-in server "RAS"
> Use the same accounts on the SME.

Your NT box won't see your SME accounts and vice versa.....different technique.
You can setup your accounts twice, and tell your users that they have to change
passwords on two systems, or you can think about implementing a RADIUS
service (for winnt you find it in the option pack) and authenticate your users
against the accounts on the RADIUS-Server. I haven't done this with Linux yet.
There should be a client/server in the RedHat distro.

Hope this helps

jochen
Title: Re: SME v5 as a domain controller
Post by: Les Mikesell on November 07, 2001, 09:06:34 AM
If you drop in the contributed dial-in package (or mgetty with a tweak or two) and put the modem(s) on the SME server it should work for dial-ins and let you keep the passwords all in one place.
Title: Re: SME v5 as a domain controller
Post by: Sidney on November 07, 2001, 06:09:01 PM
Les,

  I have the contributed install but I can't figure out how to get it to require a username and password.

Do you know how to tweak it so it will require this information?

Thanks
Title: Re: SME v5 as a domain controller
Post by: Greg Zartman on November 07, 2001, 09:56:34 PM
>Your NT box won't see your SME accounts and vice versa.....different technique.
This is an incorrect statement.  The Win NT machine can see and use all accounts on the SME machine via Samba ACL mapping.  To prove this to yourself, right click on a local folder, select security, then the Advanced button.  If you are running Samba 2.2.2 on your SME machine and have it setup correctly, SME user accounts will be mapped as DOMAINNAME/USERNAME.  

On all of my client machines and have one and only one local machine account and thats the admin account.  I manually ditch everything else.

You can also view them with the WIN NT UserManager for Domains admin tool.  The current version of Samba won't allow you to actual edit anything with this tool, which is a good thing as making edits here would really mess up the SME user account structure.

Dan and the others who have stated that Samba can't act as a PDC are 100% correct.  Samba won't have the ability to act as a BDC on a Microsoft network for some time.  Probably not until at least Samba Version 3.0

Greg Zartman