Linux as a Domain Controller?

[ahodes1]

Can Linux perform the actions of a domain controller? For example control software deployment, group policies, etc.? If so could someone point me to a step-by-step tutorial of how to do this? Also what distribution would be recommended for this? Right now I have Mandrake & Red Hat. I am a complete newbie at Linux, though I think I can learn. However I want to be able to continue to have the machine I want to install Linux on be a domain controller, and import the old policies, etc. Any suggestions would be appriciated.

[robinmthomas]

No.

There is no way Linux can function as a domain controller, especially in the areas you listed. It can handle the DNS for an Active Directory domain, and LDAP functions, but forget about anything else.

Why would the Linux community go out of their way to make it happend and in the process prove that Microsoft got it right with Active Directory.

Why would Microsoft go out of their way to show them how to do it?

Why would you want to use Linux anyway? Linux is great for a firewall, or NAT box, or file server, or web server, but other than that, Linux is a pain in the ass.

[Jon]

ROFL.

for an 'MCP in W2K Pro+Server' that was a pretty stupid question.

[ahodes1]

  Quote

Originally posted by Jon

ROFL.

for an 'MCP in W2K Pro+Server' that was a pretty stupid question.

Why is it a stupid question? Perhaps if I said I was knowledgable in Linux it would have been a stupid question. There are many things that are possible with Linux that I'm sure I am unaware of. Give me some good reasons why someone would be unable to create software that could allow linux to act as a domain controller then I will admit it was a stupid question.

[Chicane-UK Veteran]

Linux's domain controller abilities are pretty much limited to the same kind of role that Windows NT4 Server had - adding machines to the domain, authenticating through it, and sharing files off it.. and thats about as exciting as it gets.

[ahodes1]

Well is it at least possible to have the client's My Documents folder redirected to the Linux box without their interaction? I can live with only NT4 functionality if I can at least do that... For those wondering this is basically just a little experiment I want to do to be able to see how much different OS's can interact.

[Jon]

Did you actually read robinmthomas' post?

[robinmthomas]

You said:

"Give me some good reasons why someone would be unable to create software that could allow linux to act as a domain controller..."

It isn't about not being able to, it is about not WANTING TO! For a lot of reasons, (money, market share, company ideals, etc), Linux will never be able to fullfill a role so much ingrained into Microsoft and Windows. As Active Directory changes, it may pave the way for more OSes to provide support, but as it stands, there is no reason to.

If you want Active Directory, you DCPROMO a windows box. End of question.

To write the nessary code for Linux to function as a domain controller would be outrageous. A windows DC is a massive undertaking, not a weekend code-warrior trying to prove it can be done.

[ahodes1]

  Quote

Originally posted by Jon

Did you actually read robinmthomas' post?

Yes, I did. I understand that most Linux users hate Microsoft, but that is no reason that such software could not exist, is it?

[SonicYouthXY]

SAMBA...

http://www.mandrakeuser.org/docs/connect/csamba6.html

http://www.linuxworld.com/linuxworld/lw-19...ereandback.html

http://www.sambaessentials.com/index.php

http://www.linuxforbroadcasters.com/smblinux.html

http://www.secretagent.com/interviews/tridgell.html

[Jon]

  Quote

Well is it at least possible to have the client's My Documents folder redirected to the Linux box without their interaction

Wow, bit of a step down from a DC !

As folder redirection is handled by group policy (directly related to RUPs), I cant see it myself, but I've never tried.

[robinmthomas]

You may be able to redirect to a linux box, but the GPO has to be applied via a Windows DC.

[ahodes1]

  Quote

Originally posted by Jon

Wow, bit of a step down from a DC !

Keep in mind it is an "experminent" so to speak. :D

EDIT: Thank you SonicYouthXY for someone who finally didn't bash the question and tried to be helpful! I'll be looking over some of this.

[Jon]

Yeah so you could use 1 windows DC, with a gpo directing the users my docs. to a linux box, using samba.

Having never used samba tho, I dunno :)

[Vash]

you can use SAMBA as a PDC for auth and scripting, but thats about all she has.. permissions and running scripts.

Vash

[Jon]

PDC is nt4, and nt4 didnt support kerberos afaik.

[ahodes1]

  Quote

Originally posted by Jon

PDC is nt4, and nt4 didnt support kerberos afaik.

No, NT4 didn't support Kerberos, and in 2000 all DC's are equal, no PDC/BDC

[Jon]

I know (and it didnt take an mcp ;)

[ahodes1]

MCP doesn't mean you are any smarter than anyone else, just means that you proved that you know what you are doing(arguably)

[Jon]

Very very very debatable :)

Anyway, I'm hungry and ratty, so must restrain myself from getting in a pointless arguement!

[zivan56]

You can use Samba to do this i think. Try looking at more info here

[robinmthomas]

So zivan56, we meet again?!

No, you cannot use Linux to replace a Windows 2000 Domain Controller.

There is no question about this. Samba has nothing to do with domain controller, Samba is used to share files (yes, I am sure there is a better description) between windows and linux.

A domain controller has nothing to do with file sharing, yes, you can make it share files, etc, etc.

GPO, Active Directory, Multi-Master Replication, FSMO Roles, Kerberos - THEY ALL NEED A WINDOWS 2000 SERVER.

I don't understand what is so hard to understand.

I realize that Linux people are usually so narrow-minded that they assume Linux can do anything Windows can and better, but in this case Linux can not replace a Windows 2000 domain controller.

Could it be done? Maybe. Depends on how closed Microsoft's Active Directory requirements are.

The bigger statement is: IT WOULD TAKE MANY YEARS (like 5+ for a company working full-time) TO WRITE THE SOFTWARE FOR LINUX THAT WOULD ALLOW IT TO REPLACE WINDOWS 2000. (no, I am not exagerating, it would take a long time).

LINUX USERS: Face it. Linux can't replace Microsoft in this case.

[robinmthomas]

Additional Note:

Yes, Kerbeors can exists without Windows 2000. But the Active Directory implementation of Windows cannot.

[zivan56]

robinmthomas,

Next time read the topic, dont you see if he is asking can Linux perform as a domain controller in a Linux forum?

Samba can be used as a domain controller. Here is an example how to set it up.

[robinmthomas]

Now, I remember why I don't like debating you....You don't know what you are talking about.

In his first post, he states:

"For example control software deployment, group policies, etc.?"

This would imply Windows 2000 and Active Directory. GPO is an Active Directory term and feature, as well as, software deployment.

Your article points to making linux as a PDC, i.e. a Windows NT 4 domain, not a Window 2000 Active Directory domain.

Again, you don't know what you are talking about.

I restate my point: Linux cannot replace a Windows 2000 Active Directory Domain Controller.