We were getting poised to make the jump to Samba AD but we ran into an issue where, and I believe it is called, Active Directory Web Services was needed and I don't believe, at least at the time, that is something Samba supports. When I arrived the system was using an ldapsearch to generate an smbpasswd file, exported and imported every 30 minutes. My predecessors were only using Samba to bridge Windows authentication to our OpenLDAP server. We were hoping to be off NT4 domain by this summer's quarter but our moving parts are the fact that our directory server isn't in fact Samba. and I'm not going to assume their resources to affect the change needed to migrate. They have 5000 end points, so I assume they have a lot of moving parts too. I'm only 4 years new to our org so the tribal knowledge is totally gone here. It is very hard to uproot a 20+ year old directory server, especially one from an org with as many moving parts as we have. Of course it was my predecessors who entangled us in the reasons we cannot easily migrate away from NT4 so also here I replied with my statement because Rowland themselves replied to me in such a way when we were having an issue a few years ago and I'm certain Substantial_Ad_4201 is probably mired in similar entanglements as we are that prevent us from getting off NT4 domain. If it were, then my face would be an omelet. The other reason I said a bit unfair was because this issue wasn't exclusively NT4 related. I have had quite a tongue lashing from Rowland about our NT4 domain, which is why I hadn't started the Samba mailing list thread yesterday although they told me today that I shouldn't have waited to provide information. If you read my other comment I said migration is straightforward unless they were doing something wacky like we are and implied that because they're still on NT4 they must be. The two reasons I used the phrase a bit unfair was because my org is also using Samba NT4 domain but we cannot easily migrate.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |