ok, her er nogle rimeligt klare svar på hvad Samba 3.0 kan og ikke kan:
http://lists.samba.org/archive/samba/2003-October/075779.htmlSkrevet af en fra Samba dokumentations team.
> So, my fundamental question is:
>
> Can Samba 3.0 act as a Windows 2000 Domain Controller (i.e., an Active
> Directory Domain Controller with Kerberos)?
No! As stated in the HOWTO, Samba-3.0.0 can NOT act as a ADS DC. It can
act as a member server in an AD environment, but Samba can not act as an
ADS. Samba can also NOT act as an ADDC in an ADS environment.
> Is there any hope for doing this with Samba 3.0? If not... <sigh>
> then I'll just make do with Samba 3.0 as my NT4 PDC for authenticating
> my XPP client machines, but I'd really like to use kerberos if at all
> possible (and not use M$ Windows 200x Server).
I find necessity to repeat time and again: Samba-3.0.0, plus LDAP and
Kerberos is NOT the same as Windows 200x ADS + DC operation. It can not be
done. You can run Samba-3.0.0 only as a replacement for an NT4 PDC/BDC -
but even then - NOT in admixture. ie: No Samba-3.0.0 PDC and NT4 BDC (or
vica versa). Is that clear enough yet?
Så det korte og det lange er: Samba kan styre et domæne med NT4 features, og Windows klienter kan logge på. Samba kan ikke operere sammen med Windows domain controllere, men du kan sagtens komme mere end en Samba domain controller på som en failover eller load balancing ting. Samba kan ikke fungere som en Windows 2000 Active Directory Domain Controller, og Samba kan ikke styre et domæne med Win2k features. Samba kan gøre din Linux kasse til en member server i et Win2k (og sikkert også Win2k3) domain.