[BUGS] Samba as "domain controller"

[Wilkinson, Alex]

    0n Tue, Jul 01, 2008 at 06:11:41PM +1000, Brad Rushworth wrote: 

    >I'm also interested in how well Samba 3 can act as a PDC.
    >
    >I used to have a Samba domain controller for Windows 98 workstations a 
    >few years back and that worked fine for a reasonable number of clients.
    >
    >Having Windows XP machines though is completely different, but my 
    >understanding is that with the recent Samba 3 versions support is pretty 
    >good and definitely workable (although not 100%).
    >
    >I will be configuring a Samba 3 PDC in the coming weeks so I would also 
    >like to hear other people's more informed opinions.

Also ...

Samba 4.x will support adding a UNIX host into an AD Forest as a DC:

"Samba4 supports the server-side of the Active Directory logon environment
 used by Windows 2000 and later, so we can do full domain join
 and domain logon operations with these clients.

 Our Domain Controller (DC) implementation includes our own built-in
 LDAP server and Kerberos Key Distribution Center (KDC) as well as the
 Samba3-like logon services provided over CIFS.  We correctly generate
 the infamous Kerberos PAC, and include it with the Kerberos tickets we
 issue."

 -aW

IMPORTANT: This email remains the property of the Australian Defence Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 1914.  If you have received this email in error, you are requested to contact the sender and delete the email.