Better AD implementation

[mrmarkuz (Markus Neuberger)]

@NLS

It is very confusing how the “internal” domain is set (by enabling Active Directory and defining the “internal” domain… you just don’t actually know you define the internal domain there. Or when defining the actual hostname (actually FQDN!) in NS server, you actually define the EXTERNAL domain! If I am wrong, then this proves even more my point that it is confusing.
NS really needs to clean this part more.

It’s documented here:

http://docs.nethserver.org/en/v7/accounts.html#dns-and-ad-domain

@NLS

Also why when enabling Active Directory the server needs an extra IP?

The DC runs in a container because of port 53 being in use by dnsmasq and kerberos incompatibility.

Alternatives to Samba DC in Linux container

I still don't get why Samba has to be run in a container I have read these articles. I am interested in whether e.g. The following scripts in an adapted form would be an alternative. https://github.com/SebbaGerra/Samba4Centos7 https://github.com/JohnWillker/samba4_centos_6.8/blob/master/samba4_centos6.8.sh Rosi

@NLS

The most important thing about AD. You cannot have an editable active directory tree and organize it as needed. Only a simple single level of “users” and “groups” is implemented (not computers joined, not folders, not anything).

Nethserver wants to keep it simple.
It seems RSAT from a Windows client is widely used to manage AD.

Creating and managing GPO's

With the introduction of Nethserver ‘Mayo’ 7 beta we also have Samba4. Besides filesharing, Samba is also managing network objects like workstations, servers groups and users. Samba 4 is (more or less) compatible with Active Directory. In Active Directory a lot is managed through GPO’s (Group policy objects). Microsoft has a decent application for that in RSAT tools. However, as far as I know, there is no opensource alternative for that. Does this mean we are still stuck with at least 1 Window…

There’s an ldap editor too:

https://wiki.nethserver.org/doku.php?id=phpldapadmin

@NLS

No roaming profiles. Zentyal does that (and Windows servers…).

I didn’t test but roaming profiles seem to work:

Roaming profiles in ns7 Active Directory

That was missing. Roaming profiles are operatinal now! Thank you for the great support here! and great product!