Forums

Stephen
Stephen
Offline
Resolved
0 votes
After doing a lot of reading (and probably not understanding half of it) it looks like integrating Samba 4 into ClearOS is a fundamental 'under the bonnet' change. If I understand correctly Samba 4 incorporates its own servers for at least DNS, Time and LDAP purposes, effectively replacing those in ClearOS. Therefore I am assuming that the underlying architecture of ClearOS would need to point to the Samba elements instead, things like adding users, creating groups and passwords etc. So I am guessing that Samba 4 integration involves major reworking of the Webconfig as well as some form of 'connectors' for things like Zarafa (which I believe is LDAP driven).

Bearing the above in mind, does this mean that if I were to use the Samba upgrade scripts/tools to upgrade to Samba 4 this will 'break' ClearOS ?

A post a little while ago said that the Samba 4 implementation was to be considered alpha at that time, am I right in assuming that was because of the integration that is needed ? And if so is it at a stage where I can 'play' with it yet ? :P

Finally, has a decision been made yet as to whether Samba 4 Directory will be included in Community or just Pro (and if so will it be in Pro-Lite) ?

Many thanks in advance.
Steve
Wednesday, May 29 2013, 02:20 AM
Share this post:
Responses (37)
  • Accepted Answer

    Monday, July 07 2014, 07:28 PM - #Permalink
    Resolved
    0 votes
    Hi Matt,

    Still no ETA, but our development focus has shifted from ClearOS 6.6 (in beta) to ClearOS 7. There are still a few unknowns (e.g. the new installer in RHEL7) so it's hard to put an estimate on a release date. Guesstimate: we'll be seeing a public beta release by mid-September.

    In ClearOS 7, Samba will be version 4 and we already have support for regular file shares and NT domains. I don't know if the Active Directory implementation will be stable enough for the initial ClearOS 7 release, but it will certainly be ready for kicking the tires.
    The reply is currently minimized Show
  • Accepted Answer

    Matt
    Matt
    Offline
    Tuesday, July 01 2014, 09:06 PM - #Permalink
    Resolved
    0 votes
    Hi,

    any news on the progress with Samba 4? RHEL 7 was released a couple of weeks ago, so I thought there might be some official statement by now.

    I'm setting up a PDC for a tiny little office environment, and I'd really prefer ClearOS over Zentyal, but the lack of Samba 4 is a little off-putting.

    Any info on the topic would be appreciated.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, February 25 2014, 04:01 PM - #Permalink
    Resolved
    0 votes
    Richard George wrote:
    Reading between the lines - and with no ETA being provided by the Red Hat/Samba 4 integration teams, it seems to me that the full addition (transition?) to Samba 4 could be some way off.

    There's no official ETA, but at the same time full support seems to be available in RHEL7 Beta.

    I note however, that the Samba roadmap (https://wiki.samba.org/index.php/Samba_Release_Planning) suggests we could be looking at EOL for Samba 3 about Nov/Dec 2014 time. If the RH/S4 team are still working at that time, would it be worth pushing for a continuation of security fixes for S3 beyond Nov?

    My gut tells me that the 3.6.x series will be maintained for quite some time beyond 2014. There are a lot of NAS vendors using 3.x, and all will need a longer maintenance period. The work will be done internally by the NAS vendors (and Red Hat), or some kind of collaboration will occur. Regardless, 3.x will be hanging around for quite some time.

    And there is then the big question of how to move from COS 6.5 to (projected) COS 7 (which is where, I assume S4 becomes the norm) .. will we need to reinstall?

    So far, the upgrade is looking quite clean (knock on wood). The Samba 4 solution can still be configured as a simple file server / NT domain (i.e. the exact same way as it is in ClearOS 6). No Active Directory required. When playing around with ClearOS 7, the NT domain stuff worked right out of the box :-)

    Migrating from an NT-domain to Samba 4 Directory... that's another story.
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, February 23 2014, 08:09 AM - #Permalink
    Resolved
    0 votes
    Reading between the lines - and with no ETA being provided by the Red Hat/Samba 4 integration teams, it seems to me that the full addition (transition?) to Samba 4 could be some way off.

    I note however, that the Samba roadmap (https://wiki.samba.org/index.php/Samba_Release_Planning) suggests we could be looking at EOL for Samba 3 about Nov/Dec 2014 time. If the RH/S4 team are still working at that time, would it be worth pushing for a continuation of security fixes for S3 beyond Nov?

    And there is then the big question of how to move from COS 6.5 to (projected) COS 7 (which is where, I assume S4 becomes the norm) .. will we need to reinstall?
    The reply is currently minimized Show
  • Accepted Answer

    Monday, February 03 2014, 06:35 PM - #Permalink
    Resolved
    0 votes
    Quick update:

    The upstream Red Hat Enterprise Linux 7 beta included the Samba 4 components needed to deploy the ClearOS Samba Directory solution. We're hoping this means the last remaining "big" blocker has been solved (or will be solved with the final release of version RHEL 7). What's the blocker? From the Samba Directory Beta 1 Release Notes:

    To make a long story short, most (if not all) of the Red Hat family distributions use the MIT Kerberos implementation, while Samba 4 uses the Heimdal implementation. These two implementations do not play well together in certain situations and this needs to be resolved. The Samba Team and Red Hat are working on the integration, but no ETA is available at this time.

    The next ClearOS Samba Directory beta will be released on a ClearOS 7 beta with the expectation of shipping the solution with the release of ClearOS 7.
    The reply is currently minimized Show
  • Accepted Answer

    Henry Sale
    Henry Sale
    Offline
    Tuesday, January 28 2014, 10:00 PM - #Permalink
    Resolved
    0 votes
    Hello,

    Now the ClearOS 6.5 is out, any update on the Samba Directory features? can we add it as a separate connector?

    We need this functionality and we appreciate any feedback.

    Thanks
    The reply is currently minimized Show
  • Accepted Answer

    Monday, December 09 2013, 04:36 PM - #Permalink
    Resolved
    0 votes
    Hi Alexander,

    That's still in Beta 1 and will continue to move forward in 2014.
    The reply is currently minimized Show
  • Accepted Answer

    Friday, December 06 2013, 10:08 AM - #Permalink
    Resolved
    0 votes
    Hello,
    are ther any updates about samba4? ClearOS 6.5 Beta3 is now out but I dont find infos about samba 4
    Greetings Alex
    The reply is currently minimized Show
  • Accepted Answer

    Friday, November 01 2013, 06:47 AM - #Permalink
    Resolved
    0 votes
    Hi Guys

    Just wanted to check in and find out if there has been any news with regards to the community version getting Samba Directory (even with a user limitation). Also want to know if the community version will get the QoS app? What is the status of the protocol filter app - will it be making a return?

    Lastly, who can give me some advice on port forwarding and/or NAT'ing between seperate VLANs?

    Keep up the good work guys
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, October 09 2013, 06:39 AM - #Permalink
    Resolved
    0 votes
    Thanks for the update Peter. Let me give my +1 vote for having at least a limited implementation of Samba AD (maybe for 10 to 15 users) in the Community Edition. It would be a big bonus for the geeks out there.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, October 08 2013, 04:02 PM - #Permalink
    Resolved
    0 votes
    Hey Marcel,

    Marcel van Leeuwen wrote:
    I'm not super familiar with Samba I'll use it everyday (filesharing) but never follow the Samba community. What are the big changes?

    You can split Samba 4 up into two distinct features:

    - A Windows File Server -- the good ol' Samba that we have come to know
    - A server that implements the Active Directory protocol -- new in Samba 4

    For Flexshares and standard Windows Network Neighborhood kind of stuff, Samba 4 is an evolutionary change from the Samba 3 code base. Better support for Windows 7/8 comes to mind, but you probably won't notice much of a difference.

    For those looking for a drop-in replacement for an Active Directory system, Samba 4 is now an option. How did the Samba guys and gals do it? Impressive stuff!

    Am I right in assuming that ClearOS Community will get the full Samba 4 implementation including using it as AD DC?

    Doubtful. ClearCenter is sponsoring the development (non-trivial) and will want to recoup some of that cost. Active Directory is a business-only type of feature, so it's well suited to the Professional Edition. There might be an option to have a free version for up to 10-ish users (aimed at geeks who implement AD in their homes), but that's wait and see at the moment.
    The reply is currently minimized Show
  • Accepted Answer

    Friday, October 04 2013, 01:56 PM - #Permalink
    Resolved
    0 votes
    I'm not super familiar with Samba I'll use it everyday (filesharing) but never follow the Samba community. What are the big changes?
    The reply is currently minimized Show
  • Accepted Answer

    Friday, October 04 2013, 06:29 AM - #Permalink
    Resolved
    0 votes
    That's very good news. I'm glad to hear you guys are making such good progress with ClearOS. Am I right in assuming that ClearOS Community will get the full Samba 4 implementation including using it as AD DC? Will Samba 4 support full MS ActiveDirectory integration?

    Regards
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, October 03 2013, 04:26 PM - #Permalink
    Resolved
    0 votes
    Just an update. The Samba 4 beta 1 development went really really well and it will be released with the upcoming ClearOS 6.5.0 Beta 2. Because the implementation went well, we're going to keep moving forward and make it feature complete in October. There are a few apps that still need to be "Samba-4-ized":

    - Flexshare
    - IMAP/POP Server
    - Mail Settings
    - Password Policies
    - RADIUS (Wireless on ClearBOX systems depend on this)
    - Zarafa

    Except for Flexshare (which just has some weird group issue that needs fixing), the above apps all require deeper integration into the Samba 4's LDAP directory. It turns out that the existing ClearOS LDAP implementation already does most of the heavy lifting, so the estimated development time dropped by an order of magnitude. Very excited!
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, September 18 2013, 10:20 AM - #Permalink
    Resolved
    0 votes
    Hi Peter

    Thanks for letting us know. Just wanna find out, will Samba Directory be for ClearOS Community as well, or is it Pro only?

    Regards
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, September 17 2013, 06:51 PM - #Permalink
    Resolved
    0 votes
    I was just given the green light on getting Samba Directory Alpha 2 (or Beta 1?) released and you can expect it in early October :-)
    The reply is currently minimized Show
  • Accepted Answer

    Socs28
    Socs28
    Offline
    Monday, September 16 2013, 08:19 PM - #Permalink
    Resolved
    0 votes
    Just another +1 for please include this as soon as possible.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, September 05 2013, 06:12 AM - #Permalink
    Resolved
    0 votes
    Hi Peter

    Thanks for getting back to me, that sounds interesting. I would just like to add my +1 vote for including the full Samba Directory in Clearos Community.
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, September 04 2013, 06:01 PM - #Permalink
    Resolved
    0 votes
    Doh - no "all hands on deck" roadmap meeting yet. It was bumped by an OEM/wireless opportunity.
    The reply is currently minimized Show
  • Accepted Answer

    Monday, September 02 2013, 06:55 AM - #Permalink
    Resolved
    0 votes
    Hi Peter

    Just wanted to find out if there is an update on the Samba 4 implementation?

    Keep up the good work guys :)
    The reply is currently minimized Show
  • Accepted Answer

    Friday, August 23 2013, 01:27 PM - #Permalink
    Resolved
    0 votes
    Cool, thanks for the answer Peter.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, August 22 2013, 10:00 PM - #Permalink
    Resolved
    0 votes
    ClearOS 6.5.0 is baking right now and the beta should be available next week. The Samba Directory (Samba 4) app will be discussed at an upcoming roadmap meeting for inclusion in ClearOS 6.6.x. We'll see where it lands.

    I'd also like to know if there is a way to run another Linux installation as a VM on top of Clearos. If so, how is that done?

    I'm not an expert in this field, but I do see VirtualBox installed on ClearOS systems from time to time.
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, August 21 2013, 06:34 AM - #Permalink
    Resolved
    0 votes
    Hi Peter

    Thanks for the answer. I'm glad to see you guys are still moving along nicely with Clearos. I have to say it's definitely my preferred Linux firewall solution.
    I'd just like to know if there is any news regarding the Samba directory development? I'd also like to know if there is a way to run another Linux installation as a VM on top of Clearos. If so, how is that done?

    Thanks for the feedback
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, August 20 2013, 08:02 PM - #Permalink
    Resolved
    0 votes
    Bianca & Werner wrote:
    Oh, a side note. I see that Clearos 7 alpha has been listed on the roadmap, does that mean that 6.5 is the last version of Clearos 6?

    ClearOS 6 will continue on for quite some time - we'll be following the upstream releases like clockwork

    Or is that just a preliminary listing? Are you guys planning any major changes for version 7?

    A tracker item was needed with the 7.0.0 target, so it's really just preliminary stuff. As for the potential major changes in ClearOS 7:

    - IPv6
    - Based on upstream's version 7 ... will we see a beta before the end of the year?
    - ARM build ... Raspberry Pi :-)

    The app framework isn't changing much, so a clean upgrade path should be available. Our goal is to make sure all of the existing apps and most of the future apps will be compatible with both ClearOS 6 and 7.
    The reply is currently minimized Show
  • Accepted Answer

    Monday, August 19 2013, 06:44 AM - #Permalink
    Resolved
    0 votes
    Oh, a side note. I see that Clearos 7 alpha has been listed on the roadmap, does that mean that 6.5 is the last version of Clearos 6? Or is that just a preliminary listing? Are you guys planning any major changes for version 7?
    The reply is currently minimized Show
  • Accepted Answer

    Monday, August 19 2013, 06:40 AM - #Permalink
    Resolved
    0 votes
    Hi Peter

    Thanks for the answer. Id like to know if there has been any progress with Samba Directory, or are you guys waiting on Samba to sort something out? Another question, can another Linux OS be run as a vm ontop of ClearOS? If so, how would that be done?

    Thanks
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, August 15 2013, 03:41 PM - #Permalink
    Resolved
    0 votes
    Doh! I should have added this blurb to the alpha release notes. Anything with an OpenLDAP extension (e.g. the "contact information" that you see when editing a user) needs to be "Samba 4-ized". OpenLDAP extensions are required for:

    - Zarafa
    - IMAP
    - Secure Shell Extension
    - OwnCloud (unreleased)

    So, the above apps won't work on the Samba 4 / Directory Alpha. For the most part, it's just a matter of creating the Samba 4 equivalent extension. IMAP and Secure Shell are trivial, but Zarafa is more involved (AD Snap-In is required, and that's only available in commercial versions of Zarafa).
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, August 15 2013, 07:07 AM - #Permalink
    Resolved
    0 votes
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, August 15 2013, 07:06 AM - #Permalink
    Resolved
    0 votes
    Didn't add the screenshot http://www.clearfoundation.com/media/kunena/attachments/legacy/images/POP_IMAP_Samba_3_error.jpg
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, August 15 2013, 07:04 AM - #Permalink
    Resolved
    0 votes
    Hi Peter

    I forgot to mention one thing last week. I was playing around in my ClearOS Pro VM with the Samba Directory alpha installed and found that the POP/IMAP server fails to install. It gives quite a few errors complainig about Samba 3 dependencies (see attached screenshot). Would that mean a re-write of the app for compatibility with Samba 4?

    Thanks
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, August 07 2013, 05:54 AM - #Permalink
    Resolved
    0 votes
    Hi Peter

    Thanks for the quick reply. I really do hope this gets sorted out soon. I'm sure quite a few people are waiting for it. It would definitely mean that Clearos would be an alternative to a Windows server.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, August 06 2013, 04:19 PM - #Permalink
    Resolved
    0 votes
    It looks like the "%U" macro described in the Big Gotcha section is just a limitation of Samba 4 (mailing list thread). The solution is to change the home directory attribute in the directory. That's certainly do-able! Now all we need is a commitment from ClearCenter to move ahead with the feature.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, August 06 2013, 04:04 PM - #Permalink
    Resolved
    0 votes
    Unfortunately, there has been no progress on the Samba 4 / Directory implementation. The Big Gotcha is still unresolved and that has stopped everything. It's too bad since a lot of effort went into ClearOS 6 to make it Samba 4 compatible :-(
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, August 06 2013, 06:40 AM - #Permalink
    Resolved
    0 votes
    Hi Peter and the team

    I'd like to find out what the progress is with the Samba 4 integration. I've found that quite a few other opensource apps are requiring Samba 4 Directory these days ie OpenChange. I'm looking at building a ClearOs based exchange server for a client and OpenChange together with SOGo would make that possible.

    I'd also like to know whether a decision has been made as to whether the full Samba Directory, with or without user limitations, will be available for the Community version.

    Thanks
    The reply is currently minimized Show
  • Accepted Answer

    Friday, May 31 2013, 03:26 PM - #Permalink
    Resolved
    0 votes
    Stephen wrote:
    as well as some form of 'connectors' for things like Zarafa (which I believe is LDAP driven).

    There are three apps that depend on LDAP extensions:

    - Zarafa
    - RADIUS
    - Shell Extension (granting shell/SSH access)

    These apps won't work with Samba 4 Directory right out of the box. The RADIUS and Shell Extension should be easy to tweak -- only configuration file changes are required. Zarafa integration is trickier, but the Zarafa / Samba 4 schema work is already done - see https://community.zarafa.com/pg/plugins/project/9588/developer/tdeklein/samba4-ad-integration-for-zarafa
    The reply is currently minimized Show
  • Accepted Answer

    Friday, May 31 2013, 03:17 PM - #Permalink
    Resolved
    0 votes
    Hi Stephen,

    After doing a lot of reading (and probably not understanding half of it) it looks like integrating Samba 4 into ClearOS is a fundamental 'under the bonnet' change. If I understand correctly Samba 4 incorporates its own servers for at least DNS, Time and LDAP purposes, effectively replacing those in ClearOS. Therefore I am assuming that the underlying architecture of ClearOS would need to point to the Samba elements instead, things like adding users, creating groups and passwords etc. So I am guessing that Samba 4 integration involves major reworking of the Webconfig as well as some form of 'connectors' for things like Zarafa (which I believe is LDAP driven).

    Yup, it was a fundamental change but most of the heavy lifting was done with the ClearOS 6 release. We moved to a "driver-based" implementation in 6 and all the apps were built on top of a driver-agnostic layer. For example, the ClearOS PPTP server works with the OpenLDAP driver or the Active Directory Connectory driver. With no coding changes in the PPTP app, dropping in the Samba 4 Directory works like a charm!

    Bearing the above in mind, does this mean that if I were to use the Samba upgrade scripts/tools to upgrade to Samba 4 this will 'break' ClearOS ?

    You would need the "Samba Directory" driver to get this working - see alpha 1 note below.

    A post a little while ago said that the Samba 4 implementation was to be considered alpha at that time, am I right in assuming that was because of the integration that is needed ? And if so is it at a stage where I can 'play' with it yet ?

    We haven't "officially" announced the alpha, but the following alpha 1 release notes should work fine:
    http://www.clearcenter.com/support/documentation/clearos_professional_6/samba_directory_-_alpha_1

    Finally, has a decision been made yet as to whether Samba 4 Directory will be included in Community or just Pro (and if so will it be in Pro-Lite) ?

    Nope. Personally, I'm leaning on making it free for up to 10 users just cover those geeks who want to run AD on their home networks :-)
    The reply is currently minimized Show
  • Accepted Answer

    Friday, May 31 2013, 03:17 PM - #Permalink
    Resolved
    0 votes
    Hi Stephen,

    After doing a lot of reading (and probably not understanding half of it) it looks like integrating Samba 4 into ClearOS is a fundamental 'under the bonnet' change. If I understand correctly Samba 4 incorporates its own servers for at least DNS, Time and LDAP purposes, effectively replacing those in ClearOS. Therefore I am assuming that the underlying architecture of ClearOS would need to point to the Samba elements instead, things like adding users, creating groups and passwords etc. So I am guessing that Samba 4 integration involves major reworking of the Webconfig as well as some form of 'connectors' for things like Zarafa (which I believe is LDAP driven).

    Yup, it was a fundamental change but most of the heavy lifting was done with the ClearOS 6 release. We moved to a "driver-based" implementation in 6 and all the apps were built on top of a driver-agnostic layer. For example, the ClearOS PPTP server works with the OpenLDAP driver or the Active Directory Connectory driver. With no coding changes in the PPTP app, dropping in the Samba 4 Directory works like a charm!

    Bearing the above in mind, does this mean that if I were to use the Samba upgrade scripts/tools to upgrade to Samba 4 this will 'break' ClearOS ?

    You would need the "Samba Directory" driver to get this working - see alpha 1 note below.

    A post a little while ago said that the Samba 4 implementation was to be considered alpha at that time, am I right in assuming that was because of the integration that is needed ? And if so is it at a stage where I can 'play' with it yet ?

    We haven't "officially" announced the alpha, but the following alpha 1 release notes should work fine:
    http://www.clearcenter.com/support/documentation/clearos_professional_6/samba_directory_-_alpha_1

    Finally, has a decision been made yet as to whether Samba 4 Directory will be included in Community or just Pro (and if so will it be in Pro-Lite) ?

    Nope. Personally, I'm leaning on making it free for up to 10 users just cover those geeks who want to run AD on their home networks :-)
    The reply is currently minimized Show
Your Reply