topic Re: 2000 Domain Controller in Operating System - Linux

2000 Domain Controller

kcpant — Fri, 10 Mar 2006 02:55:33 GMT

Hi Friends,

I'm sure this question had already been floated in the forum in the past (pl forgive me if it is :) ). I want to replace windows 2000 domain controller & it's active directory, with a RHL (8.0/FC1/2/3, pl suggest which will work, I'll prefer 8.0) based setup. I understand that an LDAP setup will do that, but need recomendations from you gurus for how to start with, what all components to be configured, how to fine tune, and which small steps must not be forgetted in such a situation. the current W2K AD is catering to 230+ computers and 250+ users.

Re: 2000 Domain Controller

Vipulinux — Fri, 10 Mar 2006 04:30:49 GMT

Hi

I have used Redhat 8 sucessfully with openldap to do this job.

And you can always use a tool to manage openldap. Using command line is very tricky.

You will also need to configure samba.
eg.
ldap admin dn = cn=root,dc=exmaple,dc=com
ldap server = 127.0.0.1
ldap suffix = dc=example,dc=com
ldap port = 389

and
[global]
ldap admin dn = cn=root,dc=exmaple,dc=com
ldap server = 127.0.0.1
ldap suffix = dc=example,dc=com
add user script = /usr/share/samba/scripts/smbldap-useradd.pl -w -d /dev/null -g machines \
-c 'Machine Account' -s /bin/false %u
domain admin group = root Administrator @adm @Administrators @wheel

There are lot of changes on ldap side as well. ed editing /etc/ldap.conf etc

Hope this get you going.

Cheers

Re: 2000 Domain Controller

Ivan Ferreira — Fri, 10 Mar 2006 07:20:17 GMT

You can use Fedora Directory Server for ldap services, or use openldap.

Use the samba 3 howto and you will sucessfully deploy a server.

Just take in account that you will not create a Windows 2000/2003 like active directory, you will create a NT4 PDC/BDC structure. Active directory is multimaster. Also, there are a lot of things that you won't be able to do, like configure software restrictions, intellimirror, and group policies will modify permanently the windows registry, folder redirection (this may be tricked), etc.

Re: 2000 Domain Controller

Pau Garcia i Quiles — Sat, 11 Mar 2006 09:49:11 GMT

Take a look at the Samba-LDAP Howto v3 (look for "CVS version") by IdealX at http://samba.idealx.org

I'll be sending an updated version of the howto next week. Join the mailing list to get the news when it's ready.

Re: 2000 Domain Controller

Steven E. Protter — Sat, 11 Mar 2006 13:47:52 GMT

Shalom kcpant,

To totally replace the windows server, which warms my heart btw, you really need to do two things.

1) Install Samba
2) Install and configure openldap

With lesser hardware, RH will be able to take over from the Windows 2000 PDC with no problems. The migration will be a little rough.

You need Samba to share files and printers.
You need LDAP to authenticate windows users efficiently.

I also recommend a newer version of RH, because the version you propose is out of support, which will make getting help difficult.

SEP

Re: 2000 Domain Controller

Steven E. Protter — Sat, 11 Mar 2006 13:48:27 GMT

Re: 2000 Domain Controller

kcpant — Fri, 22 Sep 2006 01:38:50 GMT

Closing open threads..