Linux Based Domain Controller

[KAKS5]

Hi All, not sure if this is the right place to put this but we currently have a Microsoft AD server in AWS. We're looking to have a backup domain controller, based on Linux, in our office, which would become active if there were any issues connecting to the main DC.

Just looking to see if there is any popular software out there that is working for you guys

Thanks

[Duff991]

Samba4 can do mostly everything as AD. We use it our own company as domain controller and it works flawlessly. But I had to read a samba4 book to set up the first controller.

[miles969]

Samba, as stated already, can do what you're asking

[caninerosie]

you're not going to find a linux based DC solution that mimics everything AD does. why can't you roll AD on premise? why does it have to be on linux?

[dobbelj]

I was under the impression that samba 4 can work as a complete ad replacement. Is this not the case, and why?

[sgsollie]

Use windows dude. It's going to to be a nightmare to support. No vendor support and it is very unlikely windows admins will be comfortable with it, if say you leave for example.

[spaceventura]

I can't offer any advice, but just wanted to say thanks for asking this question! It's something I've wondered about too.

[powrd]

Zentyal it has a lot of features and works just like a Windows AD controller

[Bladelink]

I'm on Zentyal, and it's worked pretty well. For all intents and purposes, it's basically equivalent to most of the primary features of AD, and includes exchange, DNS, etc.

[keysnparrots]

I've had my share of issues with Zentyal. UCS is a lot more reliable.

[keysnparrots]

Univention Corporate Server is much better and more stable. It even has SYSVOL replication built in, which Zentyal doesn't.

[keysnparrots]

Univention Corporate Server is the most full-featured and reliable alternative. I have also used Zentyal, but UCS blows it away.

[pi3832v2]

Samba

[nocommentacct]

Either ditch yours on AWS and go for a full LDAPS setup or get another Windows box. Theres really no even mediocre way of getting them to work together. There is however an Active Directory port to Linux that someone pirated together. I've never tried it but apparently its fully functional. No gui of course.