enterprise-ubuntu team mailing list archive

[David Burke <dmbst32@xxxxxxxxx>]

Yes. I believe it is more than that though. The wikipedia
article<http://en.wikipedia.org/wiki/Active_Directory>is pretty good.
Some important features I see are replication and because
it's the de facto standard most things work with it.


On Tue, Aug 27, 2013 at 4:07 PM, Marcos Barbosa <
marcosestevesbarbosa@xxxxxxxxx> wrote:

> The Active Directory standard is LDAP plus Kerberos, this is correct?
>
>
> 2013/8/27 David Burke <dmbst32@xxxxxxxxx>
>
>> Sorry I missed it. Just watching it now.
>>
>> I can tell you about my experience with central authentication outside of
>> Active Directory. I've tried out Zentyal 3.0 with Samba4 in two use cases
>> recently.
>>
>> 1. Joining an existing Active Directory domain as an additional domain
>> controller. This was an interesting experiment but I have to suggest not
>> doing this. It quickly got out of sync with our other domain controllers.
>> Aside from this it's very slow, for example just navigating the directory
>> tree from a Windows client is very slow compared to AD. I tried running a
>> samba print server on it but found it a painful experience. Many features
>> just don't work such as listing printers in a directory. We killed off the
>> server after a month.
>> 2. Lone Zentyal server. I haven't had as many issues here and it is in
>> production usage. This is a mostly Linux environment so we are using CUPS
>> instead of samba printing. The free version I'm using is less reliable than
>> Active Directory. Updates often break things. It requires considerable
>> Linux sys admin knowledge when the gui breaks. I believe their paid version
>> has a different repository that is more well tested. Overall I would say
>> Zentyal is easier to manage than pure openldap, but not nearly as stable or
>> feature complete as MS Active Directory. One reason we migrated to samba4
>> here was to use pam_winbind instead of pam_ldap. I find pam_ldap with
>> cached credentials to be highly unreliable. Kerberos ticketing is also nice.
>>
>> Would love to hear any stories of using Samba4, directory 389, etc. I'm
>> hoping samba4 matures enough by the time Server 2003 support ends.
>>
>> Best,
>> David Burke
>>
>>
>>
>>
>> On Tue, Aug 27, 2013 at 2:00 AM, Bolesław Tokarski <
>> boleslaw.tokarski@xxxxxxxxx> wrote:
>>
>>> Hello,
>>>
>>> We will be having a UDS session today at 16:05 CET:
>>>
>>>
>>> http://summit.ubuntu.com/uds-1308/meeting/21950/community-1308-ubuntu-enterprise-desktop-roundtable/
>>>
>>> Feel invited to join the session.
>>>
>>> Cheers,
>>> Ballock
>>>
>>> --
>>> Mailing list: https://launchpad.net/~enterprise-ubuntu
>>> Post to     : enterprise-ubuntu@xxxxxxxxxxxxxxxxxxx
>>> Unsubscribe : https://launchpad.net/~enterprise-ubuntu
>>> More help   : https://help.launchpad.net/ListHelp
>>>
>>
>>
>> --
>> Mailing list: https://launchpad.net/~enterprise-ubuntu
>> Post to     : enterprise-ubuntu@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~enterprise-ubuntu
>> More help   : https://help.launchpad.net/ListHelp
>>
>>
>
>
> --
> Q: Why is this email five sentences or less?
> A: http://five.sentenc.es
>
>