Re: 5.0.6, Samba shares and MS Active Directory

From: Brian (brian_at_stanley-park.com)
Date: 03/29/04

  • Next message: Bela Lubkin: "Re: floppy boots but "mount" not there ... (was re:determine unix version)"
    Date: Mon, 29 Mar 2004 20:52:44 GMT
    
    

    Nachman Yaakov Ziskind wrote:
    > Brian wrote (on Mon, Mar 29, 2004 at 08:16:31AM +0000):
    >> James Szabadics wrote:
    >> > We have 5.0.6 setup in an NT4 domain with Samba installed. Samba
    >> > seems to talk to the domain just fine.

    >> Samba is an excellent NT4 domain server replacement.
     
    > Except for the WINS thing - ISTR that it will function nicely as the sole
    > WINS server, but will not play well with other WINS servers. True?

    There should only be a single WINS server on any Microsoft subnet.

    Erm... multiple WINS can be done but it is a kludge!

    >> > I am wondering how it will all work when we upgrade our NT4 servers
    >> > soon to 2003 server. Anyone with hints and tips?

    >> Forget about it. Microsoft Active Directory is incompatible with
    >> Unix/Linux - it is part of Microsoft's attempt to lock out competition.
     
    > So was the SMB protocol. Open Source broke that. What's to suppose they
    > won't break open AD as well?

    Samba 3 does have the capacity to join a Server 2003 AD BUT it requires some
    skills - not for the average Linux/Unix punter.

    >> If you are smart, you will forget about Active Directory and replace your
    >> NT4s with Linux running Samba.

    > There, I agree.

    The best result may be to abandon NT4 Domains and AD and exclusively run a
    Samba 3 File/Printer/Authentication system. That is my choice - economical,
    stable, secure and cross platform capable.It may not have every bell and
    whistle that AD has but what a difference in cost, security and
    maintenance!

    AD requires an all Windows 2000/XP environment (+Samba 3 of course) - no
    98se/Millennium/NT4 welcome.

    >> My experience with Microsoft AD is that it presents a heavy load on a
    >> network and routinely causes stability and security issues.

    > Can you document this, Brian? I suspect that you're right - but I'd love
    > to have some #'s to show the local Micro-brain here, who is busy
    > installing Exchange, even as I type. :-(

    AD floods a network when replicating Exchange databases. There are also
    issues of 'group policy' security and stability.

    Exchange is an expensive and high maintenance animal - have you asked WHY?

    The majority of the worlds mail rely on open source MTAs like Sendmail -
    there is a good reason for that.

    If you require some groupware/calendaring there are some excellent open
    source products that run on any browser.

    Hope that answers some of your questions.

    Brian


  • Next message: Bela Lubkin: "Re: floppy boots but "mount" not there ... (was re:determine unix version)"

    Relevant Pages

    • smb.conf (a little help please)
      ... i have finally gotten the file to allow me to get to the samba server from a windows machine, however, the thing won't let me write. ... # user level security. ... # DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names ...
      (Fedora)
    • [UNIX] Samba Server Multiple Vulnerabilities
      ... Get your security news from a reliable source. ... Samba Server Multiple Vulnerabilities ... Buffer overrun in NSS host lookup Winbind library on Solaris: ...
      (Securiteam)
    • Printing with Samba an a HP Deskjet 870Cse
      ... However, when I try to print from my Windows 2000 Server machine, it ... I suspect that there is some security ... protocol in Samba that I need to remove, but I don't know what that is... ...
      (freebsd-questions)
    • Re: Samba Server Configuration Tool 1.1.4 troubles
      ... On Fri, 2004-04-30 at 14:05, Alexander Dalloz wrote: ... >> preferences and then security. ... The default samba server tool for FC1. ...
      (Fedora)
    • Re: PHP/MySQL security issues
      ... MySQL - I would be very concerned about storing anything PCI, HIPPA or SOX related data in a MySQL db. ... even such sensitive data on a MySQL server, as long as you can guarantee ... Security is paramount and the others offer some additional sense of security through obscurity. ... Open Source has GREATER security than closed source. ...
      (comp.lang.php)