I've been working with Windows Active Directory (AD) for over 20 years in my organization, and I find it hard to understand the push towards alternatives like Azure or Entra, especially considering the potential costs. My main concern is that relying on a single vendor like Microsoft could lead to higher expenses through subscription models, especially with changes like Windows 11 making it tougher to join domains. I'm looking for insights and experiences from anyone who has attempted to replace AD with Samba. What should I be aware of regarding pitfalls or considerations when making such a switch?
5 Answers
The idea of moving away from Microsoft is tempting, but let’s be honest, AD is the gold standard. You might face significant struggles if you try replacing it with Samba. Unless there’s a significant reason, like cost or a specific tech direction, staying with AD seems like the way to go. Plus, Microsoft just rolled out improvements for AD; it’s not going anywhere anytime soon.
Right! AD still reigns supreme for a reason. It’s about minimizing risk while managing systems.
Using Microsoft management tools makes sense since you have Windows clients. If you're leaning towards Samba, you might as well consider transitioning users to Linux entirely. But honestly, moving to Intune might be a more practical choice given your organization size.
If you switch to Linux for users, you might want to skip Samba entirely. Using NFS or SSH might be more straightforward since Samba is primarily designed for compatibility with Windows environments.
Not sure if Samba is the best path. It’s good for smaller setups but can be tricky with heavy Microsoft integration.
I get your concerns about vendor lock-in with Microsoft, but replacing AD with Samba might just add unnecessary complications. For medium-sized companies, it’s often better to stick with what works. Migration could introduce more issues than benefits. Why take a risk when your current system is functioning well?
Exactly! There’s really no pressing need to switch to Samba for a setup that’s already stable.
If you decide to dive into the world of alternatives like FreeIPA, expect a learning curve. However, once you get the hang of it, you might find it quite stable and useful. Some people are using it in hybrid setups and finding success. It’s worth exploring if you're committed to transitioning.
I'll have to check it out in a lab setting! Learning new tools can be exciting.
Definitely give it a shot! It could provide flexibility you didn’t know you needed.
Trust me, I’ve tried using Samba as a domain controller before, and it's a headache. While it can mimic a basic AD setup, it lacks crucial components like file share synchronization for SYSVOL and other management features. Over time, Samba may fall further behind as Microsoft continues developing AD. I wouldn’t recommend it unless you're willing to deal with numerous workarounds.
You’re right about needing multiple authentication systems. Having a backup is a must to prevent major issues during breaches.
Are you sure Microsoft will let AD go? They have a ton of users relying on it, so it seems unlikely.
For sure! And you can still integrate SSO with AD; it’s a solid platform when paired with security measures like multi-factor authentication.