Mailinglist Archive: opensuse (1420 mails)

< Previous Next >
Re: [opensuse] AD replacement
Hi Hans,

On Tue, Jan 21, 2014 at 08:30:33AM +0100, Hans Witvliet wrote:

The people from the (upstream) samba team, told that their 4.x branch
could do a full (and painless) swap from AD towards samba, and the other
way round.

Only (little) snag was that they included all main components (smb,
ldap, krb and dns). And the only component that might be replaced by
another part was substituting samba4-DNS by BIND.

However, in 13.1 and sp3 i see that samba4 is included, but on the
changes-file, it says that full AD-functionality is not possible,
because you can not replace the kerberos-component.

(afaicr, the samba-team is using Heimdal, instead of MIT-kerberos)

That's the main issue.

So, if you need to mimick/replace a complete AD, should one use:

From there we're feeding openSUSE Factory and therefore the same
limitation applies.

It's possible to use static versions of the required libraries - as they
all are part of the main samba tar ball - instead to rely on shared as
we do. Such a build is close to unmaintainable as part of a product.
But as part of a project in the openSUSE Build Service that should be
possible with some helping hands.


Lars Müller [ˈlaː(r)z ˈmʏlɐ]
Samba Team + SUSE Labs
SUSE Linux, Maxfeldstraße 5, 90409 Nürnberg, Germany
< Previous Next >