Samba 4 with Windows 2012

Come here to share your tips and tricks for using Samba4
Locked
User avatar
Aguay
Messages: 27
Registration: May 22, 2015 - 4:20 p.m.

November 13, 2017 - 6:23 PM

Hello,

We would like to use the replication feature from one Active Directory (AD) to another (Samba) as a "relay" for a remote site.

However, I'm having some trouble understanding how it works.

Let's say:

Site A:

Subnet: 10.10.10.0/24
AD: 10.10.10.250/24

Site B:

Subnet: 10.10.11.0/24
Samba: 10.10.11.250/24
Client: 10.10.11.2

I would like my client to connect to the local AD (the Samba server, 10.10.11.250) instead of connecting to the "remote" one (10.10.10.250).

However, the client always connects to the AD at 10.10.10.250.

I created two sites on Active Directory with a configured subnet (corresponding to the network subnet), each with its own domain controller.

However, it's still not working, and I'm not sure how to resolve this. Could any of you help or guide me on how to set up a domain controller relay?

Thank you in advance for your help.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

November 21, 2017 - 09:24

Hello,

could you please tell us the current forest functional level on Windows 2012?

https://wiki.samba.org/index.php/Joinin ... AD#Warning
User avatar
Aguay
Messages: 27
Registration: May 22, 2015 - 4:20 p.m.

November 23, 2017 - 12:19

sfonteneau wrote: Nov 21, 2017 - 9:24 AM Hello

, Could you please tell us the current forest functional level on Windows 2012?

https://wiki.samba.org/index.php/Joinin ... AD#Warning
Good morning,

Thank you for the link, which is very informative.
The functional level is that of 2008.
It seems to me that this is the last one available and there aren't any others after it?
When I check on the server, that's what I find.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

November 23, 2017 - 12:23

So which version of Samba do you have? :)
User avatar
dcardon
WAPT Expert
Messages: 1929
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

January 15, 2018 - 6:07 PM

In the current version of Samba 4.7, even if the forest level is 2k8r2, it's not possible to join a 2k12 Active Directory. Support for 2k12 schemas (I mean schema, not functionality, FAST, silos, etc.) is in progress, and there are patches floating around on the mailing list. I don't know if they'll be included in the upcoming 4.8 release.

As I mentioned in another post, it's possible to extract the content and reintegrate it into a Samba 4 instance, but it requires a certain level of technical expertise...

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Locked