samba as a domain controller

SwampThing

All, a quick question if someone can clarify please.

We have a windows 200x domain, with a number of windows based domain controllers.

We have a number of remote site on an MPLS network that have no DC at the site. We do have a Redhat ES 5 linux server at each site and we use samba for file shares etc. on these boxes.

Can I configure sambe on these machines to be domain controllers for these remote sites? We experienced an outage at our central site recently and users at the local sites couldn't log into their pc's - I'm assuming becasue they couldn't contact a DC.

Thanks.

ntlbell

Quick question, quick answer. yes.

SwampThing

I suppose I did ask a quick question.

So, just to elaborate a bit - I understand there are limitiations to the AD implementation on Samba 3, but what will it do. Will it act as if there is a backup domain controller availabel for authentication at login, essentially avoiding the situation explained before?

Any other pros or cons to doing this?

Thanks in advance

ntlbell

You're going to have to do some trickery with OpenLDAP

If you want some honest advice, if you're not very comfortable with Samba/LDAP.

Save yourself a lot of time and heart ache, and pop in a lowish spec windows box at each of the sites.

SwampThing

I'm starting to think that way too.

Thanks.

djmarkus

Samba 3 can only be an NT based domain controller. It can only be a member of a 2K/AD domain(not a DC).

Samba 4 will be able to do this when its finished.

Naikon

It's a little tricky to setup a Domain controller with samba. So if your Unix
skills are a little rusty, then dropping in a few windows boxes is a better solution
as said above.