Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Samba BDC???
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
petrjanda
Veteran
Veteran


Joined: 05 Sep 2003
Posts: 1557
Location: Brno, Czech Republic

PostPosted: Sun Jan 02, 2005 5:24 pm    Post subject: Samba BDC??? Reply with quote

How to set up samba as a Backup Domain Controller in case PDC fails?
_________________
There is, a not-born, a not-become, a not-made, a not-compounded. If that unborn, not-become, not-made, not-compounded were not, there would be no escape from this here that is born, become, made and compounded. - Gautama Siddharta
Back to top
View user's profile Send private message
barbar
Guru
Guru


Joined: 16 Apr 2003
Posts: 397
Location: Austria

PostPosted: Sun Jan 02, 2005 9:05 pm    Post subject: Reply with quote

I haven't done it so far. Additionally to samba you will also need openldap.

Have a look at this HowTo: http://samba.iasi.roedu.net/samba/docs/man/Samba-HOWTO-Collection/samba-bdc.html#id2520195
Back to top
View user's profile Send private message
moocha
Watchman
Watchman


Joined: 21 Oct 2003
Posts: 5722

PostPosted: Sun Jan 02, 2005 9:11 pm    Post subject: Reply with quote

If you're using Active Directory, forget it. You can try using samba-tng instead of samba, but note that it's not production quality software. Not by a long shot.

If your PDC is a Microsoft NT4 PDC, there's no way to do it.

http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html#id2516969 wrote:
The following functionalities are not provided by Samba-3:

SAM replication with Windows NT4 Domain Controllers (i.e., a Samba PDC and a Windows NT BDC or vice versa). This means Samba cannot operate as a BDC when the PDC is Microsoft-based or replicate account data to Windows BDCs.

Acting as a Windows 2000 Domain Controller (i.e., Kerberos and Active Directory). In point of fact, Samba-3 does have some Active Directory Domain Control ability that is at this time purely experimental that is certain to change as it becomes a fully supported feature some time during the Samba-3 (or later) life cycle. However, Active Directory is more then just SMB it's also LDAP, Kerberos, DHCP, and other protocols (with proprietary extensions, of course).


If your PDC is a Samba PDC, see http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/.
_________________
Military Commissions Act of 2006: http://tinyurl.com/jrcto

"Those who would give up essential liberty to purchase a little temporary safety deserve neither liberty nor safety."
-- attributed to Benjamin Franklin
Back to top
View user's profile Send private message
nobspangle
Veteran
Veteran


Joined: 23 Mar 2004
Posts: 1318
Location: Manchester, UK

PostPosted: Mon Jan 03, 2005 12:03 am    Post subject: Reply with quote

having a BDC doesn't help much if your PDC fails (unless you promote it to a PDC) they're more to help take the load off of the PDC on a large domain.

To use a PDC and BDC with samba you pretty much have to be using the LDAP backend, you can do it without but your domain will break very quickly as samba has no way of keeping the databases in sync.
Back to top
View user's profile Send private message
petrjanda
Veteran
Veteran


Joined: 05 Sep 2003
Posts: 1557
Location: Brno, Czech Republic

PostPosted: Mon Jan 03, 2005 1:37 pm    Post subject: Reply with quote

The PDC is Samba 3.x.x. I know I need OpenLDAP server master on the PDC, and then slave LDAP server on the BDC. Im asking this: if PDC fails, will users still be able to domain logon through the BDC? I'm also planning nightly data replication over NFS, so they still have their files/profiles.
_________________
There is, a not-born, a not-become, a not-made, a not-compounded. If that unborn, not-become, not-made, not-compounded were not, there would be no escape from this here that is born, become, made and compounded. - Gautama Siddharta
Back to top
View user's profile Send private message
nobspangle
Veteran
Veteran


Joined: 23 Mar 2004
Posts: 1318
Location: Manchester, UK

PostPosted: Mon Jan 03, 2005 1:53 pm    Post subject: Reply with quote

if the PDC fails they will still be able to logon, but they would still be able to logon using cached data even if there wasn't a BDC.

I would use rsync to duplicate the netlogon share rather than messing around with NFS.
Back to top
View user's profile Send private message
moocha
Watchman
Watchman


Joined: 21 Oct 2003
Posts: 5722

PostPosted: Mon Jan 03, 2005 5:09 pm    Post subject: Reply with quote

nobspangle wrote:
I would use rsync to duplicate the netlogon share rather than messing around with NFS.


That's very wise advice! NFS can bring you a lot of headache, not to mention it adds unnecessary complexity to an already complex system.
_________________
Military Commissions Act of 2006: http://tinyurl.com/jrcto

"Those who would give up essential liberty to purchase a little temporary safety deserve neither liberty nor safety."
-- attributed to Benjamin Franklin
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum