Samba 4 Active Directory PDC - to provide Windows (XP) and Linux (F18) login
|
Work In Progress |
|---|---|
| This article is currently undergoing major expansion or restructuring. You are welcome to assist by editing it as well. If this article has not been edited in several days, please remove this template. |
Progress so far - Oct 2013
Well, due to the below described problem it is necessary to install samba functioning as ADC separately. I have now freshly set up a CentOS 6.4 server and compiled samba 4.2 according to general guidelines. some troubleshooting was necessary with DNS zone file permissions and understanding of DNS was required. Windows XP machine has now joined the realm successfully and can use AD domain management tools. My existing Fedora 18 machine has problem joining the realm - seems some local misconfiguration bug with realmd that has been adressed in Fedora release 19.
So now the main test will be when I install Fedora 19 (I wanted to upgrade anyhow) later this or next week as time permits.
So far I do not see yet how this process will easily lend to be transferred to amahi. However it should not be impossible either - if we can find a way how ADC can be installed using distribution specific package.
Intro - spring 2013
It would be great if a home server such as Amahi could provide an easy setup for a mixed linux / windows network at home. Without too much hassle (e.g. synchronising account databases, winbind...). Upon release of Fedora 18 - Spherical Cow I much hoped that would be easy and intended to convert my home debian server to fedora and use it as an AD (Active Directory) PDC (Primary Domain Controller) server . The big gain would be a possibility to set up a single login for home/small office users to access shared resources (e.g. files or printers) without being explained at length that you in fact have two passwords, how come when you change your windows password you have to change it on linux too, without needing to explain how you access shares differently on each computer etc.
After some research I found that Samba 4 AD PDC out of the box is not quite possible yet and work would be needed to get such a system working. The main reason is - Samba team use a different kerberos implementation - Heimdal. RedHat -> Fedora for various reasons historically have been using use MIT kerberos. Fedora have very well described why Fedora at this stage are not offering possibility of AD server. Details: We are intending to make possible use of AD DC functionality with MIT Kerberos but this is longer term project that requires cooperation between Samba, MIT, and FreeIPA. Longer term in this case sounds more like over a year or two, especially considering the number of people that may need to be involved.
What I am going to try to do as an interim prototype is to compile samba with AD PDC 4 from sources on an Amahi capable server and then use Fedora 18 and XP computers as clients. Once such set-up is well documented and repeatable, then it would be possible for to think how the process can be integrated with Amahi. This page will be updated with the progress and your comments and suggestions, or messages to me are very welcome.
