UCS 2.4 - Univention

8 Services for Windows
With this program a UCS server can adopt the role of a member server and the role of a primary domain
controller (PDC) or a backup domain controller (BDC) in the domain (More information on server roles can
be found in Chapter 2.1.
Thus, the combination Samba/OpenLDAP is a hybrid between Windows NT domains and Active Directory.
From the perspective of a Windows client, it is a Windows NT domain. Univention AD Connector can be
used for connecting an Active Directory service.
However, as far as the administration of user, group and computer information is concerned, it is a complete
directory service based solution with all of its advantages.
Attention:
Replication between Windows-based and Linux-based domain controllers is not implemented in Samba as
standard. Univention can, however, provide Samba BDC packages for UCS, with which a UCS system can
be operated under a Windows NT PDC (primary domain controller) in a Windows NT domain as a BDC
(backup domain controller). Otherwise only domain controllers with the same directory service can be used
within one domain, so that changes can be replicated to the other directories from the changed master
directory. That means that without the expansion mention above, it is not possible to operate Windows-
based domain controllers and Samba-based domain controllers with OpenLDAP in one domain. Notes on
the synchronisation of directory service objects with Windows 2000/2003/2008 with Active Directory can
be found in the documentation for the Univention Active Directory Connector [16]
Further reading on Samba can be found on the website http://www.samba.org/.
8.2.1 Authentication Service
The passwords are stored in the LDAP directory. Users are authenticated against the LDAP directory
when logging into the domain with their username and password, and can then access all the shared
resources of the domain without having to enter their username and password again. Computers with any
kind of Windows operating systems are authenticated in the same way as in Windows NT domains, via
the NTLMv2 protocol.
8.2.2 File server
Users working on Windows clients can also store their files on an UCS server. This process is transparent
for the users since they can store their files on a drive, as with Windows. Per default the home directories
of all users are shared by Samba and assigned as drive I: after login. Univention Directory Manager allows
the drive letters to be adapted in a comfortable way for each user (see chapter 4.5.1, tab Windows).
The share management of Univention Directory Manager makes it possible for users to share other direc-
tories of the Linux file system within the domain in the form of Windows shares (see chapter 4.5.5).
Recommendable file systems on the Linux side are ext3 and XFS. These file systems allow the use of
Access Control Lists (ACLs) and disk space restrictions (quotas) for users or user groups. Both of these
features can be configured under Windows.
188