Samba-TNG Team Releases 0.3

emissary47 writes "The Samba-TNG (the next generation) team, releases the first beta of Samba-TNG (a Samba fork since 2000) including some very interesting features for everyone willing to replace NT4 domain controllers. With excellent LDAP-backend support, integration of Microsoft tools such as usermanager for domains and servermanager and a powerful command-line tool called rpcclient it is _the_ alternative solution for Windows domain controlling at the moment. They even include scripts for NT4-server migration in order to make a change easier."

Comments

What's new?

[$$$$$exyGal]

Taken directly from the announcement, but it's short enough to just put here.

Most important changes in 0.3:

• Updated LDAP schema in ldap/samba-tng.schema-v3
• Improved LDAP backend (subcontexts, performance speed up)
• NT trusting TNG works now out of the box
• Update to the registry tools in rpcclient
• libiconv usage

--sex

Samba lead considers the fork a Good Thing(TM)

[tempest303]

Before anyone gets off on a huge rant about this fork being pointless/harmfull/etc, read this - it's a statement by Andrew Tridgell, saying that he is "delighted" about the fork...

Re:NTLMv2?

[praetorian_x]

In what context? NTLM authentication over the web (between IE and a java based app server) is available at http://jcifs.samba.org. This is a great solution for "single signon" for intranet applications.

Of course, it goes without saying, that this protocol is not internet safe

The JCIFS team even includes a delightful filter than you can plug in so request.getRemoteUser() will return DOMAIN_NAME\user_name. Realy good stuff for intranet development.

Now, if only 'zilla will get NTLM support in 1.3...

Cheers,
prat

Re:Better late than never?

[msgmonkey]

There are alot of places that still use NT4 and with MS EOL'ing it people will be forced to upgrade to Windows 2000. If this makes it easy for people to move over to Linux instead of Windows 2000 than all the better.

Samba-TNG+OpenLDAP howto

[Anonymous Coward]

Due to the complexity of LDAP, and samba w/PDC in general about 6 months ago I wroteup a pretty significant document on how to configure and deploy such a system, I've spent more then 40 hours on it to date, it's fairly complete:

http://howto.aphroland.de/HOWTO/LDAP

no way in hell could it withstand the slashdot effect, it runs ontop of Zope which is slow enough as it is! Apache seems to be in the order of 2000x to 2500x faster then zope+Zwiki, but the features of zope make it worth it.

(been on /. for 5 years and still don't have an account)

Re:late ???

[ed1park]

"Can Samba be a Backup Domain Controller?
With version 2.2, no. The native NT SAM replication protocols have not yet been fully implemented. The Samba Team is working on understanding and implementing the protocols, but this work has not been finished for version 2.2.

Can I get the benefits of a BDC with Samba? Yes. The main reason for implementing a BDC is availability. If the PDC is a Samba machine, a second Samba machine can be set up to service logon requests whenever the PDC is down."

You can find out more here...

http://us2.samba.org/samba/ftp/cvs_current/docs/ ht mldocs/samba-bdc.html

Re:late ???

[buchanmilne]

can samba-TNG be a real PDC and comunicate to a NT BDC all the information such as the userlist AND when it falls over and comes back up (system maintenance) take back the PDC status and any changes from the BDC ?

AFAIK, this is what TNG was aiming for.

acting as a PDC and syncing with a NT BDC is what SAMBA really lacks IMHO

You mean samba-2.2.x. Samba-3.0alpha does support this, and has a better NT->Samba migration tool, 'net rpc vampire'.

Samba3 is due out in about 2 months (hopefully).

What I want to know is, have they got all the samba-2.2.x features?

We run samba-2.2.x with ldap support for samba-only PDC/BDC operation.

Re:NTLMv2?

[abartlet]

NTLMv2 authentication is fully supported in Samba 3.0 - we brought the code across from TNG 18 months ago.

Recent alphas have LMv2 authenticaion too :-).

The truth is, almost nobody uses NTLMv2 - certainly not MS...

Re:Article Extremely Misleading

[abartlet]

This comment is misleading. There are no plans for samba.org to release Samba TNG, they are there own project now, and we have our own development process that is producing a very nice PDC for 3.0.

Samba 2.2 contained basic domain control capabilty, and 3.0 really does a good job of completing it.

Also, Samba 3.0 does many things that TNG does not - in particular Active Directory client support, and even Active Directory DC developement (very early)

Re:Printing?

[psamuels]

Did I mis-read it?

No, you read it right. Here's the thing. samba.org has a much larger and (well, at least back in the boom days) better-funded team than we do, so we can only concentrate on so much at a time. Printing just isn't a priority. It might work in samba-tng, in some cases (it is after all derived from samba.org code, which includes printing) but we don't pay much attention to it.

If you need your PDC to also be a print server, you should either (a) run samba-tng and samba.org on the same machine, on two separate IP addresses and netbios names (yes, this is a common and supported configuration), or (b) just use samba.org for your PDC, which in the past wasn't such a great idea but nowadays it is reported to be quite usable.

Re:Still doesnt fix a Samba problem.

[Spruce Moose]

When did you last post to samba-technical about it?

Try again - you might have some better luck. Bring your log file at debug level 10 with you.