Slashdot Mirror
Active Directory Comes To Linux With Samba 4
Da Massive writes in with another possible answer to a recent Ask Slashdot about FOSS replacements for Microsoft AD server. "Enterprise networks now have an alternative choice to Microsoft Active Directory (AD) servers, with the open source Samba project aiming for feature parity with the forthcoming release of version 4, according to Canberra-based Samba developer Andrew Bartlett. Speaking at this year's linux.conf.au Linux and open source conference in Hobart, Bartlett said Samba 4 is aiming to be a replacement for AD by providing a free software implementation of Microsoft's custom protocols. Because AD is 'far more than LDAP and Kerberos,' Bartlett said, Samba 4 is not only about developing with Microsoft's customization of those protocols, it is also about moving the project beyond just providing an NT 4 compatible domain manager."
According to TFA FOSS AD is not here yet by a long shot, in early alpha, many missing features. Summary is *terrible* in suggesting non-M$ AD is already here.
Those are my principles, and if you don't like them... well, I have others.
Exactly. You need CALs for stuff like:
AD
Exchange
Terminal Server
etc.
It adds up pretty quickly.
It's really a nightmare for IT Depts as they have to keep track of the CALs and ensure they have enough licenses to cover the number of users.
A careful reading of the TOS says that it is licensed via user or device CALs based on authenticated users..
They actually have an example if you use AD as back end authentication on a web site you have to buy a CAL for ever user, or magic uber-CALs for the web server.
Really, it is just a tax. A MS shop typically has to pay:
- For a OEM license on windows
- For a volume license upgrade on windows
- For a device or user CAL for the windows machine/user
- For a windows server license (per VM!)
- For exchange server (and a windows server license)
- Per user exchange CALs (yay!)
- Office CALs for outlook
It used to be a CAL came along with NT4 so you didn't need a separate one, but that is not the case anymore. MS said their customers wanted the simpler model of paying more for the same thing.
Of course, CALs and VLK upgrades are locked to specific versions so you have to keep buying them again and again to keep the additional rights.
The only happy area is that the CALs apply to all servers at once, so if you have a thousand users and a thousand servers you only need a thousand CALs.
No software checks this, but these are the terms.
It is really quite insane, but maximizes MS's profits.
See http://www.microsoft.com/windowsserver2008/en/us/client-licensing.aspx
And keep in mind that MS thinks performing an authentication against AD is accessing the server.
Actually - the AD support in Samba is a bit of old news, since that has been promoted before.
But it's still good news, especially since lately the configuration of Microsoft's softwares and platforms has started to get incredibly complex and very hard to penetrate - as well as configure in a secure way.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
No...no...no
There are "per device" or "per user" licenses.
If you have 5000 computers but 40,000 users, it is probably cheaper to buy device licenses...so you can do that.
In addition, each server DOES require a server license (which is different than a CAL).
Windows is licensed like so
Standard edition license includes 1 phys server + 1 VM (on the same server)
Enterprise includes 1 phys server + 4 VM (again on the same server)
Datacenter includes unlimited server licenses of any type
Users with enterprise agreements or software assurance don't have to repurchase - they're covered under their contract.
If you're calling an imperfect alternative to insanity "fixed"...
...why, you must be a Windows 7 developer. ;)
...'tis easier to blame than to improve.
What's wrong with Micosoft's licensing model? You pay either per server or per seat. If you license some servers per server, and some per seat their monitoring software tells you how often you need to "true up", and if their software fails to do its math correctly they get to sue you and seize all your computers. That makes a lot more sense than Linux or BSD's licensing model where no matter how many clients or servers you have you don't have to pay. That's just anarchy.
Help stamp out iliturcy.
Well really they probably pay for "service".
Now some think this is a total waste of money and the whole point of Linux is you don't pay for anything. While it's true you can do this, if you're multi-million wonga business is relying on your IT that may not be too smart.
But buying "service" isn't some nasty con, you're actually getting something. Also you can shop around for it, and even switch suppliers.
Now the "free" aspect of Linux really helps you (as a business) as all your "computer wonks" can have a copy (for free) and take it home, use it outside the office (so they learn the product inside out). It does work out cheaper than Microsoft. The product evolves quicker, but you're not forced on some insane upgrade cycle.
You can get lots of certified hardware (which is important) and you're not alone (lots of other businesses have done the same).
Business get very twitchy when Linux advocates talk about "free" and the reason is they want to know: "Who's accountable if this stops working". A word of advice if you're trying to get your employer to consider Linux, keep the talk about "free" to a minimum (even "cheap" has negative connotations) instead talk about:
Lower Total Cost of Ownership
Competition in the market for Linux Support
No vendor lock-in
Hardware support from all major suppliers
Plenty of success stories
Oh and don't forget Sun make great Linux kit (not just Solaris)
Whether you agree with it or not, Linux has a very small market share in the two places it counts: gaming and the office. It's "big news" here when we find a government organisation or a school going with a Linux installation, and until it stops being so we can never consider Linux *as good* as MS or OS X, purely because of usage base. This functionality is an excellent step in the right direction for the office software, because we (as sysadmin's) can build a server that silently integrates with all the XP/Vista machines on a network, without "telling" anybody about it. After a few months of having a stable linux server in place, we can start pushing stable Linux onto the less-than-important PC's - like the receptionist (who can/should be trained) or the marketing department. Slowly (but surely) bringing across all the machines possible we can to Linux. Having AD functionality is definitely the first step. Getting a decent-free Exchange-replacement will be the next (and I mean free in the same way that Debian is free, unrestricted as much as possible) in the chain. Simply put, any OSS supporter needs to make some compromises to get their software into the enterprise. People grow up on Windows, or on OS X (as a rule it is one or the other) not (necessarly) on Linux, so we need to ease them in.
Oh and Linux has its own Directory functionality, it's OpenLDAP. It's just not necessarily as easy to maintain as Open/Active Directory.
My $0.02 AU.
Me failed English...
FreeBSD over Linux. If my comments seem odd, this may explain...
Look, you seem like the average unbiased poster so I'm going to give you a few tips even though I'm going to be modded off topic.
If you're going to defend Microsoft or one of their products on /., you need to observe a few simple rules:
Don't ask for proof of Microsoft malfeasance. You'll just get proof, and that doesn't serve your goal. Read the series of Halloween documents for an introduction to how much we know. It's scary.
Don't ask questions you don't know the answer to. That's good guidance for lawyers, too. You'll get answers you don't want.
Don't ask about someone else's experience. Their experience isn't going to help your cause, and you'll get replies from the least helpful people.
Do brag features, but do it with some understanding of the features. Don't just list the marketing babble. Don't brag more than three features at a time because it's then obvious you're typing them from a list. Do brag features that seem important to the parent poster.
If you must employ "anecdotes are not proof" be prepared for a swarm of people who confirm the anecdote. Nearly a billion people use MS software. Given enough experience, every failure mode is common. Every anecdote is common here and you would be surprised how selection bias draws people with shared anecdotes to slashdot just in time to skew the replies.
If it's allowed in your contract, do be specific: What platform worked well on Vista, how much RAM did you have? What video card? If you must avoid vendor bias, split the vendors by market share and let the astroturfers brag up proportionate systems - if they work. And if they don't work, leave it alone.
Slashdot has a grand bullshit detector, so don't lie. If you lie, the lie is not just going to be modded down - the responses to the lie are going to be modded up and be the only thing that people see, so the lie does more damage than silence would.
There are more rules, but this should help quite a bit for now.
Help stamp out iliturcy.
I had the pleasure of formatting our Windows 2003 server this summer and completely replacing it with an Ubuntu Samba OpenLDAP Domain server using this tutorial... http://ubuntuforums.org/showthread.php?t=640760 The server has been working flawlessly at our school since September! We ran out of CAL's and our school is expanding very quickly. It didn't make sense to purchase more and continue paying the micro$oft tax..
Whether you agree with it or not, Linux has a very small market share in the two places it counts: gaming and the office.
Honestly? Gaming does not count. There was a nice market breakdown I saw not that long ago from AMD, breaking it down into laptop/desktop/server and low-end/mainstream/enthusiast and the gaming segments are honestly not that large. Replacing every Windows/MS Office with a Linux/OpenOffice solution would be 1000x greater than turning LAN parties into LUGs. Nor is it easy fruit - a game requires a lot of software infrastructure, it's got limited actuality (Linux support two years after is a big meh) and is full of bleeding edge performance optimizations. Just to take that college drop-out article we had recently - the school could have said "MS Office or OpenOffice". The DSL installation disc could have said "For Linux do steps X instead". Lots of things in that article was her fault but it's quite clear that Linux could be a lot more supported in ways that would matter a lot more to the masses that a few FPS junkies.
Live today, because you never know what tomorrow brings
Clearly you havent priced the full costs of a full set of servers (and addons) for Exchange. AD etc. Not to mention all the client licenses you need (CALs or whatever they are).
I am sure there are quite a lot of people who would LOVE to be able to replace a windows server machine with a linux machine running Samba + OpenChange + whatever else
It's "big news" here when we find a government organisation or a school going with a Linux installation...
We're not a big office but we run on Linux. Primary application servers and most of the desktops. So far it hasn't been any big news outside and not a big deal inside. It was a quiet transition, no user upheaval. The best part is we (the IT department) don't have to spend part of our day handling the crisis/virus/trojan/black screen crisis of the moment. We actually have time to document, plan upgrades, and spend time on development instead of serving the Redmond machine. The stress level comes way down.
You don't realize how much time you spend servicing Microsoft until you get away from them. Not just servicing the machines but the whole ecosystem. It's so complex, you need so many supporting services to keep it running right that the Windows admins I've seen are in a constant state of stress. And I think they like it, even though they tend to complain about how busy they are. Maybe it's job security. Don't know and honestly don't care.
All I know is I can go to a partner integration meeting today knowing everything is working fine and, in the absence of hardware failure or massive internet outage, will stay working. That there won't be a stack of trouble tickets in the queue or bill for some piece of software that does...something...that we need because MS didn't include it in the base server package.
That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
It is every bit as racist as niggardly is; as in "Microsoft behaves niggardly with its protocols while at the same time preaches interoperability."
That legitimate words "sound kinda like" racist slurs does not mean the common words are racist. On the other hand, we have just been trolled.
The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
Nice anecdote, but all that says is that the IT people in your company don't have a clue. Once upon a time, IT people were just as clueless about Windows / PC's. It's sad really - people call themselves professionals and then behave like that, refusing to educate themselves (If you are not CONSTANTLY educating yourself in IT, you will very very quickly become a dinosaur.)
Hmmm...Obviously the teachings of KARL MARX figure prominently in your school's curricula... ;-)
Reminds me of a story one of my former teachers told. He was working as a consultant for this decently large corporation. When taking stock of their computers he noticed an ancient NT server was sitting in the server closet doing their email and basic file serving. He went to the PHB and was told "I don't care what you change but do NOT touch that NT server! We had lots of problems until a IT guy we hired a few years back fixed it. It has never failed since and I do NOT want you messing with it!".
Of course being an IT nerd that instantly made him want to see what this "Miracle worker" had done. So one weekend while everyone was gone he plugged a monitor in to see what his magic recipe was. What he found was Red Hat 4 running with a text file sitting in \ with READ ME IMPORTANT. So of course he did. It said "The stupid boss thinks this is an NT server. Keep your mouth shut and everything will be fine. Dave". He of course choked on his coffee laughing, upgraded the RAM(which the PHB authorized) and soon after left the company. He said "it was too damned much like Dilbert."
ACs don't waste your time replying, your posts are never seen by me.