Hello,

2014-09-07 14:58 GMT-03:00 Simo Sorce <simo@redhat.com>:
On Sun, 2014-09-07 at 01:12 -0300, Sergio Belkin wrote:
> Is (Samba) Fedora 20 still not capable of being Active Directory Domain
> Controller?

It is current, and Samba in F20 will never have the AD bits.
Maybe F22, or perhaps even F21, the work to replace Heimdal with MIT is
proceeding well enough.

if you're interested, I've written a blog post on how to enable Samba 4 AD functionality on a Fedora / RHEL system. All the bits are there, you simply need to rebuild the Samba package with domain controller support and create a service file for it:

http://negativo17.org/samba-4-active-directory-with-bind-dlz-zones-dynamic-dns-updates-windows-static-rpc/

Of course this re-enables the bundled Heimdal Kerberos implementation, but it's rock stable. Simo Sorce also promptly fixed an issue in the Kerberos libraries after I wrote it (thanks again!):

http://negativo17.org/samba-4-active-directory-with-bind-dlz-zones-dynamic-dns-updates-windows-static-rpc-update/

I've had it running for the past year without issues.

Regards,
--Simone


--
You cannot discover new oceans unless you have the courage to lose sight of the shore (R. W. Emerson).

The Stone Age came to an end not for a lack of stones; and the oil age will end, but not for a lack of oil. (Ahmed Zaki Yamani, former Saudi Minister of Oil)

http://xkcd.com/229/
http://negativo17.org/