Samba Support in Red Hat Enterprise Linux

Updated

Supported setups in current RHEL releases with Samba 3.6 and later versions.

  • General
    • We don't support deprecated options if there are replacements for them. Customers should migrate to new options. If a customer is not able to migrate to a new option we should discuss the best way forward.
  • Client
    • Winbind and related tools (security=ads and security=domain)
    • We support all winbind setups especially having a Linux client joined to an Active Directory domain. This includes all tools needed to get information out of a Domain like wbinfo, joining and managing accounts with the 'net' command and pam_winbind for logging in.
  • Client libraries
    • The following libraries are supported: libsmbclient, libsmbsharemodes, libnetapi and libwbclient. They are needed by Desktop Environments or Display Managers for logging in.
    • Also for user login: libnss_winbind.so, libnss_wins.so and pam_winbind.so.
    • Samba as a NT4 domain member for existing installations (security = domain)
  • Server
    • Deprecated
      • security = share. Please move to security = user for current configurations. This feature is old and shouldn't be used anymore. It has been already removed in Samba 4.0.
      • security = server. Please move to security = user for current configurations. It has been already removed in Samba 4.0.
    • Supported
      • File server
      • security = user: File servers in 'security = user' mode are fully supported and will be in future.
      • 'net rpc trustdom': For customers who already run a PDC we support trust relationships with AD.
      • security = ads: We only support cases where winbind is running. smbd without winbind is unsupported.
      • Security = domain: this should not be used in updated AD setups and should only be used for nt4 domains.
      • CTDB+GFS2 setups are only supported as a standalone setup, 3rd party application accessing the filesystem is not supported. 
  • Print server
    • We fully support Samba as a print server with cups and lprng backend.
  • Primary Domain Controller (PDC)/Backup Domain Controller (BDC) (NT4 style)
    • We support these configurations for all customers who already use it. These modes shouldn't be suggested to new customers as NT domains are a feature of Windows NT - which is already not supported by Microsoft.
    • Smbldap-tools: As we don't package them we shouldn't support it. But if the customer can prove that it is a samba issue (providing logs, backtraces, reproducer) we are fine fixing issues.
    • This is analogous to the third-party software policy

NOTE: The samba package will not provide the Active Directory DC parts. Red Hat Enterprise Linux is using the MIT Kerberos implementation as its Kerberos infrastructure of choice. The Samba build in Red Hat Enterprise Linux is using MIT Kerberos implementation in order to allow system-wide interoperability between both desktop and server applications running on the same machine.
At the moment the Samba Active Directory Domain Controller implementation is not available with MIT Kerberos.

    -- The Red Hat Samba Team

Product(s)
Components
Tags
Article Type