SAMBA in a large/complex environment? 1

[eddysteenbergen]

I lead the file/Domino system admin team in DPIWE, a Tasmanian govt dept. We currently provide file server services to our clients using an NT4 based PDC/BDC environment. I am looking at the viability of SAMBA in my agency's environment as an alternative to Win2k A/D. Can anyone advise on viability? or how best to determine viability?
What is distinctive about DPIWE?
1. Five significant locations on a statewide WAN - speeds from 2mbits/sec to 10mbits/sec.
2. File server in each location with a standard directory/access control structure.
3. Many business units have staff in more than one location. Staff in a business unit can access their unit's data on any server.
4. Complex access control structures i.e. 6-7 access controls common on folders/files.
5. ~1000 staff

I am interested in whether SAMBA can provide functionality, good performance, and low cost of management.
Eddy Steenbergen
Team Leader Internal Systems
Corporate IT
Dept Primary Industries Water and Environment
Tasmania, Australia
ph: (03) 6233-3838

 

[sleipnir214]

The gotcha for Samba in your environment is your domain structure. Samba does not do authentication across trust relationships between domains. Want the best answers? Ask the best questions:

http://www.tuxedo.org/~esr/faqs/smart-questions.html

TANSTAAFL!

 

[eddysteenbergen]

Hi sleipnir214 - are you implying that I will need to set up each server with it's own domain? Eddy Steenbergen
Team Leader Internal Systems
Corporate IT
Dept Primary Industries Water and Environment
Tasmania, Australia
ph: (03) 6233-3838

 

[jonl711]

In the NT domain structure you have a PDC and BDC where user can login and get their access. The BDC server will allow users to authenicate. In the case of Linux Samba, samba does not have a BDC and therefore each users authenication would have to come from the main server or the local server would have to have the account of the users in that domain. This is the only problem I see. Is this a problem, usually mean more admin work in maintaining passwords. however I think you can get around this problem with Novells eDirectory for Linux, you can then use the NDS to authenicate. I'm currently looking into this so do hold me accountable.

http://linux-sxs.org/edir86x_linux.html