Configuring an adicional Nethserver domain controler

(Vasco) #1

Hi everyone

I’m trying to add an adicional Nethserver domain controler but without success. I have always the following errors:

Task completed with errors # (exit status )
Failed to join Active Directory

The configuration I have in windows network is:

Realm - home.lan
domain - home
LDAP accounts branch - cn=Users

What is wrong?

(Roberto Sitzia) #2

Hi @vcc

precisely what are you trying to achive?

(Vasco) #3

Hi @sitz

I’m trying configure an adicional Nethserver with ldap autentication and that autentiction made with the same users from the primary domain controler (NethServer)

(Roberto Sitzia) #4

I’m quite sure that is not possibile.
Function you are using is intended to configure NethServer with an existent
AD domain controller to reuse users and groups.

(Vasco) #5

Sorry, my english is not so god and my technical knowled is worst :smile: .

How can I connect the two methserver’s, 1 as primary domain controler and the other as an adicional domain controler for the first?

(Giacomo Sanchietti) #6

Sadly, you can’t. There is no trust relation between two NethServers.

(Michele Bortolotto) #7

so we can not add a secondary nethserver configured to act as a BDC ?

(Giacomo Sanchietti) #8

As far as I know Samba doesn’t support it.
But I never tried it, and I really don’t want to :smiley:

(Roberto Sitzia) #9

I don’t know if with Samba is possible to have a PDC and BDC but with some tricks you could achieve this.
If you think that full restore from backup takes too much time you could have a fake BDC that is equal to the PDC through rsync, in case of disater the fake BDC can bu used as PDC.

what do you think @giacomo and @AbsyntH?

Could it works?

(Michele Bortolotto) #10 we can make a POC to add this feature :wink:

(Roberto Sitzia) #11

The @AbsyntH 's supremacy

OK for the POC.

(Michele Bortolotto) #12

You know that @giacomo will hate us…

(Roberto Sitzia) #13

Yes I know that…

(Giacomo Sanchietti) #14

Ahahah, until this horrible thing doesn’t hit the core implementation, I don’t hate anyone! :smiley:

(Michele Bortolotto) #15

do not believe him, he’s caressing his peacemaker

(Stefano) #16

IMHO you don’t really need it…
the implementation of such a feature is far more difficult than a restore of server configuration on a new machine
moreover, I’d say that there’s no linux server oriented distribution that has this feature (but I’d like to know if I’m wrong)

(Michele Bortolotto) #17

You are right @zamboni and as i can see the only way to set it up it’s to use a standard samba installation (no nethserver webUI aviable)

(Vasco) #18

Thank you all

I like this