Samba 4 Reaches "Susan" Stage
superfebs writes "Some day ago Samba4
reached a pretty serious test stage. Promises are beautiful: full SMB protocol implementation, Active Directory Domain Controller facility, and more; here's a full roadmap."
← Back to Stories (view on slashdot.org)
Just remember, that if it wasn't for Luke Kenneth Casson Leighton, most of the ideas in Samba 4 would never have even been thought of, never mind implemented.
It'd be nice if they gave him some credit somewhere instead of just blanking him out because he 'rocked the boat'.
It can be a pain to set up at first because you have to deal with config files, but once it's set up, it Just Works (TM).
My little network at my apartment has two windows machines (roommates), my linux machine, and the xbox with XBMC. I can share movies and music across the network and it always works. The xbox and the windows machines can always see shared directories.
On the other hand, SMB on the windows xp and windows 98SE only works some of the time. I can always count on mine working though.
Good job, samba team!
For those who don't follow too closely, what necessitated a rewrite of Samba 3 and/or what gains are to be expected?
"I assumed blithely that there were no elves out there in the darkness"
Robocopy, part of the Windows resource kits, is what I use on Windows.
An ad called the "Linux Resource Center: Sponsored by Microsoft". The irony.
Karma whorin' since 1999
Ever tried to add some Redhat servers to a windows domain with user-account given automagically by Active Directory? Tried for 2 days, gave up...
I certainly hope the configuration is more userfriendly now.
Screw the FSM - Real geeks believe in the Invisible Pink Unicorn
I don't care if it's 90,000 hectares. That lake was not my doing.
It would be nice if they actually fixed their LDAP code so that it would work with any directory server other than OpenLDAP. The fact of the matter is, I spent the last month trying to get PDC functionality to work with iPlanet Directory Server, and even Netscape Directory Server, which coincidentally Redhat just purchased, and the buggy Samba implementation of LDAP as a storage mechanism for account information just doesn't work with anything other than OpenLDAP. Users on a Windows XP workstation can't authenticate, and sometimes they can authenticate by the XP client gets a BSOD right after authenticating. It's bizzare, it's actually as if Samba is sending the XP client a buffer overflow while authenticating. If someone can prove me wrong I would be happy to hear it.
I spent weeks working with RHEL technical support, and even had one of the Redhat support techs rebuild my environment, and sure enough, his users can't authenticate either (and experience the same BSOD).
I'd love to be able to replace my entire Windows NT 4 domain with Samba running on Linux, but until Samba can actually provide a backup domain controller functionality that works with our existing LDAP infrastructure, I'm sorry, but Samba is not ready for prime-time. Having a single point of failure in your Samba PDC is not acceptable for enterprise use.
Can you believe the only workable enterprise-level solution for Samba is to make the Samba server a domain member of an Active Directory domain? And then you still have to purchase Windows Client Access Licenses (CALs) for all of your workstations, saving you $0!!! (Not to mention your RHEL license and support fees which are more expensive than Windows 2003 Server)....
Fucking ridiculous... If I sound a little pissed off it's because I wasted a month of my time trying to get this buggy software to work properly and even Redhat enterprise support just threw up their hands and said: Sorry, it's not supported and doesn't work.
"When the president does it, that means it's not illegal." - Richard M. Nixon
Samba has been my savior on many occasions because of the damn Macs. They don't just handle remote file-systems very well. They never release a file they open. The G5s at my work I often have to boot off because other users are unable to move files around which is part of our workflow process currently so its quite annoying. Samba fixes the problem by acting as my proxy. It talks very nicely to all major network platforms. They've done some nice work this far, Samba 4 looks even more promising.
OK, I know it's popular to bash MS here, but precisely what is the the horror that is AD on XP? Like MS or not if you've got x thousand users needing shared file/print resources across multiple servers / sites then AD with XP does a pretty reasonable job. It's easy to administer, easy for users to understand and the flexibility of clever combinations of site / ou / group based policies give a level of intuitive usability that very little else will provide.
Bash MS all you like. I dont like alot of their stuff either, just give some evidence for the stuff you dislike and admit to the stuff they do well.
I would prefer to see NDS implementations and Novell server integrations than to give MS the fuel to convince IT that Windows is the way to go since Unix only works with AD.
http://saveie6.com/
The BSD and Apple categories would be just as appropriate. Perhaps Slashdot needs a *nix category ...
yes - i wanted to introduce several stand-alone daemons, for several reasons:
... would anyone DREAM of merging postfix, cyrus, nntpd and apache into a single daemon??
1) project manageability.
you tell people that samba is 350,000 lines of code and they freak out. you tell them that they can work on say writing a special samr daemon (e.g. a sql db one) which would be oh about 30-50k lines, and they start to calm down a bit.
2) clear delineation and separation of code at logical boundaries.
the complexity of the samba project was getting out of hand, and it is still out-of-hand.
by introducing separate services, which almost every other implementor of NT-compatible servers have done, you don't end up feeling like you've swallowed a tiger.
3) commercial and other-licensed-projects can interoperate.
sun microsystems would never have bothered to license AT&T's AFPS code [NT 3.5 ported to SysV by microsoft - badly - and bought by AT&T].
or, at least, if they had, they would have chucked away the file-server part of it, and used smbd as the file server, whilst still using the NT-based services from NT 3.5-ported-to-unix!
and they would have used the published interfaces - the ones used to communicate with the external DCE/RPC services.
the reasons i was quoted AGAINST doing separate services were that a) it would be several milliseconds too slow (which is a rubbish argument on a network-based protocol) and b) unix domain sockets cannot be used securely (which, given that they are used in winbind is again rubbish)
no, the real reasons why samba was not turned into separate daemons was a) so that samba could be used to maintain control as a single GPL project b) because i was the one advocating it c) the level of complexity was not understood and i failed to explain it clearly enough.
Well, first off, eDirectory which replaces NDS already runs in a Linux environment. Secondly, Samba is an implementation of SMB, which is what Microsoft uses. Samba would not seek to replace Novell servers, because they don't work using SMB (aka CIFS).
XAD is very interesting, and it works, yet is ... lacking in key areas that would aid in migration.
you can make a XAD server be a member of an NT-controlled forest, but the replication protocol is itself a beast-and-a-half, such that it is not yet possible for a XAD server to replicate and then "take over" an NT server.
which is a pity.
also, lukeh has modified a number of open source projects to allow "plugin" components to be added, such that he can out-source to his own components.
the source code for these plugin methods _is_ available - ironically, the one for samba does pretty much EXACTLY what i do for samba tng - outsource the DCE/RPC traffic - yet unfortunately, XAD itself, the core of it, perhaps unsurprisingly, is proprietary.
Tridge wrote the core of Samba4 in about a day of coding spread over about a day and a half elapsed. That blew my mind. He did have a clear idea of what he was going to do when he started, but nevertheless it's startling to watch. He also wrote the core to have unprecedented flexibility, so it's going to be just as interesting to see what some of the other Samba geniuses do with it now that it's airborne (just).
It's also going to be interesting to see if naming his test tool "smbtorture" this time around (instead of "smbclient") is going to prevent people coming to rely upon it for day-to-day administration. (-:
Got time? Spend some of it coding or testing