LCA: A Samba 4 update

Posted Jan 18, 2012 22:47 UTC (Wed) by jonabbey (guest, #2736)
Parent article: LCA: A Samba 4 update

One presumes Samba 4 also has an integral DHCP server?

LCA: A Samba 4 update

Posted Jan 18, 2012 23:07 UTC (Wed) by foom (subscriber, #14868) [Link] (3 responses)

I hope it has an integral NTP server too. The clients need to have the correct time for Kerberos to work, and it sure would be a pain to have to configure NTPd and samba separately!

LCA: A Samba 4 update

Posted Jan 19, 2012 6:22 UTC (Thu) by abartlet (subscriber, #3928) [Link]

NTP support is via a configuration option for NTPd.

restrict default mssntp

We didn't wish to reimplement this protocol if we could avoid it. The option to point to a different NTP signing deamon (a samba service, on by default) is:

ntpsigndsocket /var/run/ntp_signd/

The NTPd on the system must have been configured with --enable-ntp-signd

Andrew Bartlett

LCA: A Samba 4 update

Posted Jan 19, 2012 22:19 UTC (Thu) by codewiz (subscriber, #63050) [Link] (1 responses)

> I hope it has an integral NTP server too. The clients need to have the
> correct time for Kerberos to work, and it sure would be a pain to have
> to configure NTPd and samba separately!

I hope it gets an integral TCP/IP stack too. It's needed in order to communicate with the clients :)

Seriously, does Samba *really* need to rewrite custom versions of everything? I used to run an enterprise network in which Windows clients had to coexist with Linux and MacOS clients. Most corporate networks already have their own dns, dhcp, ldap and kerberos services and all they need the Samba DC to integrate with them--not replace them.

LCA: A Samba 4 update

Posted Jan 20, 2012 0:14 UTC (Fri) by dlang (guest, #313) [Link]

note that they tried to get one of the existing DNS servers to care about their issues, but weren't able to get anyone to work with them. Only after that approach failed did they decide to roll their own.

I agree with you that it's far better to integrate with an existing project rather than recreating it, but in this case it sounds like they tried