2000 Domain Controller

[kcpant]

Hi Friends,

I'm sure this question had already been floated in the forum in the past (pl forgive me if it is :) ). I want to replace windows 2000 domain controller & it's active directory, with a RHL (8.0/FC1/2/3, pl suggest which will work, I'll prefer 8.0) based setup. I understand that an LDAP setup will do that, but need recomendations from you gurus for how to start with, what all components to be configured, how to fine tune, and which small steps must not be forgetted in such a situation. the current W2K AD is catering to 230+ computers and 250+ users.

[Vipulinux · Accepted solution]

Hi

I have used Redhat 8 sucessfully with openldap to do this job.

And you can always use a tool to manage openldap. Using command line is very tricky.

You will also need to configure samba.
eg.
ldap admin dn = cn=root,dc=exmaple,dc=com
ldap server = 127.0.0.1
ldap suffix = dc=example,dc=com
ldap port = 389

and
[global]
ldap admin dn = cn=root,dc=exmaple,dc=com
ldap server = 127.0.0.1
ldap suffix = dc=example,dc=com
add user script = /usr/share/samba/scripts/smbldap-useradd.pl -w -d /dev/null -g machines \
-c 'Machine Account' -s /bin/false %u
domain admin group = root Administrator @adm @Administrators @wheel


There are lot of changes on ldap side as well. ed editing /etc/ldap.conf etc

Hope this get you going.

Cheers

[Ivan Ferreira]

You can use Fedora Directory Server for ldap services, or use openldap.

Use the samba 3 howto and you will sucessfully deploy a server.

Just take in account that you will not create a Windows 2000/2003 like active directory, you will create a NT4 PDC/BDC structure. Active directory is multimaster. Also, there are a lot of things that you won't be able to do, like configure software restrictions, intellimirror, and group policies will modify permanently the windows registry, folder redirection (this may be tricked), etc.

[Pau Garcia i Quiles]

Take a look at the Samba-LDAP Howto v3 (look for "CVS version") by IdealX at http://samba.idealx.org

I'll be sending an updated version of the howto next week. Join the mailing list to get the news when it's ready.

[Steven E. Protter]

Shalom kcpant,

To totally replace the windows server, which warms my heart btw, you really need to do two things.

1) Install Samba
2) Install and configure openldap

With lesser hardware, RH will be able to take over from the Windows 2000 PDC with no problems. The migration will be a little rough.

You need Samba to share files and printers.
You need LDAP to authenticate windows users efficiently.

I also recommend a newer version of RH, because the version you propose is out of support, which will make getting help difficult.

SEP

[Steven E. Protter]

Shalom kcpant,

To totally replace the windows server, which warms my heart btw, you really need to do two things.

1) Install Samba
2) Install and configure openldap

With lesser hardware, RH will be able to take over from the Windows 2000 PDC with no problems. The migration will be a little rough.

You need Samba to share files and printers.
You need LDAP to authenticate windows users efficiently.

I also recommend a newer version of RH, because the version you propose is out of support, which will make getting help difficult.

I also recommend a second computer to act as a backup in case the primary domain controller needs to be booted or runs into other issues.

SEP

[kcpant]

Closing open threads..