On Wed, 2006-01-25 at 14:19 -0800, Pete Rowley wrote: > Les Mikesell wrote: > > >Is anyone following the Active Directory services in samba4 > >(http://www.zdnet.com.au/news/software/soa/New_Samba_targets_Active_Directory/0,2000061733,39234687,00.htm) > >enough to comment on how it would compare to FDS for network > >authentication purposes? > > > > > > > It isn't really a case of versus. There is a high likelyhood that in > any large deployment you will want FDS as the backend server to SAMBA. > Indeed, the SAMBA team appear to realise that writing it all themselves > is not the best idea when there are perfectly good existing, scalable > open source solutions available for the components they need. The > standalone LDAP services for instance will likely not be intended to > replace an existing LDAP deployment or indeed to displace the need for > one - rather I suspect the internal LDAP functionality is intended for > cases where a directory server is overkill and the additional services > of directory servers are unrequired, and what is really required is an > even lighter LDAP sufficient to get the job done in these cases. Ditto > Kerberos. > > So to sum up, if you have a need now that is best filled by a fully > fledged directory server, you should probably not expect that to change > when SAMBA4 releases. > > This all of course, IMO. ---- It is the only way they can really provide a complete turnkey type solution as an AD alternative. The samba list is replete of examples of people trying to obtain a samba integration with LDAP and for these people, an integrated - even if simplistic adaptation of LDAP and kerberos server should be more accommodating. Craig
