Samba 4.2.0 released

Posted Mar 6, 2015 7:54 UTC (Fri) by ptman (subscriber, #57271)
Parent article: Samba 4.2.0 released

At some point I think Alexander Bokovoy told me that Samba doesn't work with FreeIPA, but needs a MS AD DC to mediate trust between them. Is this still the case, or can you build a MS server free domain with file services using FreeIPA and Samba?

Samba 4.2.0 released

Posted Mar 6, 2015 11:04 UTC (Fri) by stumbles (guest, #8796) [Link] (1 responses)

Assuming this is current information, Samba4 and FreeIPA have to be configured a certain way. The bigger take away I get is Kerbose or Heimdal.

Samba 4.2.0 released

Posted Mar 7, 2015 7:38 UTC (Sat) by ab (subscriber, #788) [Link]

No, Samba AD DC doesn't support cross-forest trust yes so it cannot trust or be trusted by FreeIPA yet. We are working on fixing this part but not there yet.

Samba 4.2.0 released

Posted Mar 6, 2015 12:55 UTC (Fri) by LS73 (guest, #101351) [Link] (1 responses)

That is no longer the case, now you can use samba as a file server in a freeIPA domain complete with AD trust and single sign on support:

http://www.freeipa.org/page/Howto/Integrating_a_Samba_Fil...

Samba 4.2.0 released

Posted Mar 7, 2015 7:40 UTC (Sat) by ab (subscriber, #788) [Link]

Note that it doesn't allow you to trust a forest hosted by Samba AD DC because Samba AD DC doesn't support cross-forest trust. So yes, you can have Samba file server as a member of FreeIPA realm in Fedora 21 and RHEL 7.1 but you still are not able to run AD part of the infrastructure on Samba AD DC and trust FreeIPA at the same time.

Samba 4.2.0 released

Posted Mar 7, 2015 7:36 UTC (Sat) by ab (subscriber, #788) [Link] (2 responses)

It is still the case. We have some progress on it, hopefully there will be an update during SambaXP.

Samba 4.2.0 released

Posted Mar 10, 2015 7:20 UTC (Tue) by ptman (subscriber, #57271) [Link] (1 responses)

Thank you for your reply. What would be the best place to follow progress?

Samba 4.2.0 released

Posted Mar 11, 2015 7:06 UTC (Wed) by ab (subscriber, #788) [Link]

SambaXP conference is probably a best place. Otherwise, you'd need to look at samba-technical@ discussions and rates of commits into development trees on git.samba.org where most of developers keep their preliminary work.