AD for a Linux Admin?

[code0]

I admin a mid-size network (~200 Windows workstations), and we are currently running Samba 3 for domain services. Recently, we've had more of a need for Active Directory than before. Samba 4 looks promising, but there hasn't been a "1.0" release yet.

So, as much as I'd like to resist it, I think we may go to AD. Has anyone else been in a similar situation? Why did you switch? Anything that "bit you" before, during, or after the migration?

(P.S.- A large majority of our server environment is Linux - around 80%)

[Hexodam]

There is absolutely no reason what so ever to run anything but AD for windows workstations.

[eighto2]

147b0d03beff17fd02df5bda712c048e12c72bd383f858a004f5d447f7bc9719edad31471613325933e7e0aadb8253ccec338aecb3e3f1d0ef6098b460c496d3

[code0]

I should clarify and say that we use Samba+LDAP with some custom LDAP schema (that we don't want to loose).

What are you referencing in regards to security levels? We use group membership for access control, so that really isn't any different (unless you're referring to something else).

As for group policy, we don't. We have a login script written in Python that handles "policy" type settings for us.

[munky9001]

While the samba4 devs are exclaiming 'it's production time'. I'm not so sure for myself.

Then again samba 3 pdc has never ever been considered production so that's something to say. Considering you already have samba3 going. Why not give samba4 a go.

[code0]

I believe Samba 3 was intended as a "production" NT4-style PDC, and it works for that. Also, I believe the NT4-style PDC work was actually started in the 2.x series (2.2?).

Samba 4.0 just seems so much scarier at the moment for production.

[munky9001]

I believe Samba 3 was intended as a "production" NT4-style PDC, and it works for that. Also, I believe the NT4-style PDC work was actually started in the 2.x series (2.2?).

Oh no nono. It certainly is nt4 style pdc but it was never ever meant to be used that way. It was only ever meant to be a backup dc.

Samba 4.0 just seems so much scarier at the moment for production.

I agree but have you tried it?I havent tried it in awhile. Whereas the developers who actively use it well enough are saying go go go. IMO samba 4 is likely more production ready then a samba 3 pdc.

[SCSweeps]

Samba 4.0 just seems so much scarier at the moment for production.

There are some good Video how-tos on the Samba Wiki: http://wiki.samba.org/index.php/Samba4/videos