[Samba] samba4 4.1 wiki/explanation: dcerpc endpoint servers

[Daniel Müller]

Dear all,
still miss an exact wiki/explanation about the params of "dcerpc endpoint
servers" concerning samba ADS, samba member, samba standalone!?
Just give me a hint where to look at.

Thank you
Daniel


EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen
Tel.: [phone], Fax: [phone]
eMail: ***@tropenklinik.de
Internet: www.tropenklinik.de

[Rowland Penny]

Post by Daniel Müller
Dear all,
still miss an exact wiki/explanation about the params of "dcerpc endpoint
servers" concerning samba ADS, samba member, samba standalone!?
Just give me a hint where to look at.
Thank you
Daniel
EDV Daniel Müller
Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen
Tel.: [phone], Fax: [phone]
Internet: www.tropenklinik.de

As far as I can see, there doesn't appear to be any documentation, but
you also mention member & standalone servers. You only get the
"dcerpc endpoint servers" line in smb.conf if you provision samba4 with
samba-tool, whilst it appears that you can provision a member or
standalone server, trying to provision either of these will not actually
work, they will appear to work, but won't. I have updated the AD DC
Howto page:
https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO#Provisioning_The_Samba_Active_Directory
to reflect this.

Rowland

[Rowland Penny]

Post by Rowland Penny
As far as I can see, there doesn't appear to be any documentation, but
you also mention member & standalone servers. You only get the
"dcerpc endpoint servers" line in smb.conf if you provision samba4 with
samba-tool, whilst it appears that you can provision a member or
standalone server, trying to provision either of these will not actually
work, they will appear to work, but won't. I have updated the AD DC
https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO#Provisioning_The_Samba_Active_Directory
to reflect this.

Should we really explain in the _DC only_ documention, options for
Member and Standalone servers and that it's not possible to provision
both? It has nothing to do with the DC.
I prefer to keep the documentation small and simple and just explaining
the options, the documentation is for. The Member Server documentation
already says, that you can't provision a Member. I think this fits more
to the topic.
Regards,
Marc

Hi Marc,
I understand what you are saying and in an ideal world, I would tend to
agree with you, but this is not an ideal world and people are trying to
provision member servers. Baring this in mind, I thought it was a good
idea to add the note to the '--server-role' parameter. It isn't a lot,
only a couple of sentences and if it stops one person trying to
provision a member server, then I think that it is worth it.

Rowland

[Rowland Penny]

Post by Rowland Penny
I understand what you are saying and in an ideal world, I would tend to
agree with you, but this is not an ideal world and people are trying to
provision member servers.

When they're trying to setup a Member Server, they will look at the
https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#A_note_on_provisioning
If they look at the _AD DC_ Howto, when they want to setup a Member
Server, they are completely at the wrong place and haven't understand
the difference of a DC and Member is.
I think, this information confuses more at this place.
Regards,
Marc

I don't think this will cause confusion, it is an explanation of one the
samba-tool provision options and is half way down the page. I think that
some people are totally missing that the page is on how to set up an AD
DC server and think that they can set up a member server in the same
way. Putting something into the explanation about 'server-role' to tell
people that you cannot provision a member server and pointing them to
the member server howto, is in my opinion, not out of place.

Rowland

[Rowland Penny]

Post by Rowland Penny
I don't think this will cause confusion, it is an explanation of one the
samba-tool provision options and is half way down the page.

Yes. Then they haven't understand the first half of the guide. :-)
Already the second sentence on the page: "This document explains how to
set up Samba as an Active Directory Domain Controller.". And every
section talks about AD DC.

Post by Rowland Penny
I think that some people are totally missing that the page is on
how to set up an AD DC server ...

We can keep it there. But I think, it's confusing and on the wrong
place. The whole page says nothing about "member", and in almost every
paragraph we talk about DCs.
Regards,
Marc

OK, I still think that it needs to be documented, how about if I move it
to the FAQ page ??

Rowland

[Rowland Penny]

Post by Rowland Penny
OK, I still think that it needs to be documented, how about if I move it
to the FAQ page ??

I think, the FAQ a better place there. Do you move it?
And as a compromise, I linked the "Member Server" in the introduction ;-)
Regards,
MArc

OK, good compromise, yes I will move it tomorrow.

Rowland

[Klaus Hartnegg]

Post by Rowland Penny
I thought it was a good
idea to add the note to the '--server-role' parameter.

Why does 'provision' even accept different values for the option
'server-role', if that only causes problems.

The command "samba-tool domain provision --help" claims that it can be
used for member and standalone servers.

And btw. this was one of the few items on my suggested "README FIRST"
webpage.

[Rowland Penny]

Post by Klaus Hartnegg

Post by Rowland Penny
I thought it was a good
idea to add the note to the '--server-role' parameter.

Why does 'provision' even accept different values for the option
'server-role', if that only causes problems.

I think that the 'provision' python scripts were written with the
intention that samba4 would be able to provision everything, but the
samba4 code hasn't got there yet :-)

Post by Klaus Hartnegg
The command "samba-tool domain provision --help" claims that it can be
used for member and standalone servers.

Yes, I know and I am fairly sure that a few people have tried to
provision a member server by following the AD DC howto, that is why I
added the info to that page.

Post by Klaus Hartnegg
And btw. this was one of the few items on my suggested "README FIRST"
webpage.

Have you got any notes on this "README FIRST" page and if you have, do
you want to share them ?

Rowland

[Klaus Hartnegg]

Post by Rowland Penny

Post by Klaus Hartnegg
And btw. this was one of the few items on my suggested "README FIRST"
webpage.

Have you got any notes on this "README FIRST" page and if you have, do
you want to share them ?

It ended up on a non-linked (and thus quasi hidden) wiki-page
https://wiki.samba.org/index.php/Samba_Readme_First

[Rowland Penny]

Post by Klaus Hartnegg

Post by Rowland Penny

Post by Klaus Hartnegg
And btw. this was one of the few items on my suggested "README FIRST"
webpage.

Have you got any notes on this "README FIRST" page and if you have, do
you want to share them ?

It ended up on a non-linked (and thus quasi hidden) wiki-page
https://wiki.samba.org/index.php/Samba_Readme_First

OK, I have tidied up the "README FIRST" page and made it visible, when I
say visible, I mean, if you go to the wiki main page and click on 'more'
under 'User Documentation' , the link is near the top of the page that
opens, I would have put a link on the main page, but it is locked for
editing.

Rowland

[steve]

I prefer to keep the documentation small and simple

+1. Each.

[Rowland Penny]

Post by steve

I prefer to keep the documentation small and simple

+1. Each.

I have just had a thought, this must be the first time that anybody has
complained about too much Linux documentation :-D

Rowland

[steve]

Post by Rowland Penny

Post by steve

I prefer to keep the documentation small and simple

+1. Each.

I have just had a thought, this must be the first time that anybody has
complained about too much Linux documentation :-D
Rowland

LOL. Has to be!