Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[Samba] Wsus

901 views
Skip to first unread message

Carlos A. P. Cunha

unread,
Jul 15, 2016, 11:00:02 AM7/15/16
to
Hello!
It is possible to have a WSUS with Samba 4?

Thanks

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Carlos A. P. Cunha

unread,
Jul 15, 2016, 12:40:03 PM7/15/16
to
Unfortunately I am not :-D


Em 15-07-2016 13:32, Marc Muehlfeld escreveu:
> Hello,
>
> Am 15.07.2016 um 16:48 schrieb Carlos A. P. Cunha:
>> It is possible to have a WSUS with Samba 4?
> Yes, as long as you run it on a Windows Server, of course. :-)
>
>
> Regards,
> Marc

Marc Muehlfeld

unread,
Jul 15, 2016, 12:40:03 PM7/15/16
to
Hello,

Am 15.07.2016 um 16:48 schrieb Carlos A. P. Cunha:
> It is possible to have a WSUS with Samba 4?

Yes, as long as you run it on a Windows Server, of course. :-)


Regards,
Marc

Carlos A. P. Cunha

unread,
Jul 15, 2016, 12:50:02 PM7/15/16
to
ok, I thought it might have something similar in Samba 4 with WSUS
because my network does not have Windows Server.
Thank you


Em 15-07-2016 13:42, Thomas Maerz escreveu:
> You can join a Windows Server to a Samba4 Domain controller and set up
> the WSUS server role and it should work. HOWEVER, if you are going to
> point all your devices at the WSUS server, you will require CALs for
> the devices or the users using them to maintain licensing compliance
> with Microsoft. At this point, you have paid for the number of Windows
> Server CALs you need to run actual Active Directory and may as well
> not use Samba at all as it is arguably less reliable (in some
> situations) and feature rich than a modern Microsoft AD implementation.
>
> Thomas Maerz

Thomas Maerz

unread,
Jul 15, 2016, 12:50:02 PM7/15/16
to
You can join a Windows Server to a Samba4 Domain controller and set up the WSUS server role and it should work. HOWEVER, if you are going to point all your devices at the WSUS server, you will require CALs for the devices or the users using them to maintain licensing compliance with Microsoft. At this point, you have paid for the number of Windows Server CALs you need to run actual Active Directory and may as well not use Samba at all as it is arguably less reliable (in some situations) and feature rich than a modern Microsoft AD implementation.

Thomas Maerz

>

Thomas Maerz

unread,
Jul 15, 2016, 1:00:02 PM7/15/16
to
Some things to check out for linux-based patch management of Windows (and other) clients: http://vfense.github.io/vFense/ <http://vfense.github.io/vFense/> http://www.opsi.org/en <http://www.opsi.org/en>

Thomas Maerz
Network/Systems Administrator
Brewer Science, Inc.
A+ NET+ CCENT MCDST
tma...@brewerscience.com <mailto:tma...@brewerscience.com>
work: 573-364-0444 x1402
cell: 573-612-1349

CONFIDENTIALITY NOTICE
This message (and any of its attachments) is intended for the addressee and may contain confidential information, may be attorney-client privileged, and may constitute inside or non-public information under federal or state laws. Unauthorized use of this information is strictly prohibited and may be unlawful. If you have received this email transmission in error, please immediately notify the sender by return email, delete the email and any attachments, and empty any folders containing the discarded information.

> On Jul 15, 2016, at 11:44 AM, Carlos A. P. Cunha <carlos...@gmail.com> wrote:
>
> ok, I thought it might have something similar in Samba 4 with WSUS because my network does not have Windows Server.
> Thank you
>
>
> Em 15-07-2016 13:42, Thomas Maerz escreveu:
>> You can join a Windows Server to a Samba4 Domain controller and set up the WSUS server role and it should work. HOWEVER, if you are going to point all your devices at the WSUS server, you will require CALs for the devices or the users using them to maintain licensing compliance with Microsoft. At this point, you have paid for the number of Windows Server CALs you need to run actual Active Directory and may as well not use Samba at all as it is arguably less reliable (in some situations) and feature rich than a modern Microsoft AD implementation.
>>
>> Thomas Maerz
>>
>>>
>>> Hello,
>>>
>>> Am 15.07.2016 um 16:48 schrieb Carlos A. P. Cunha:
>>>> It is possible to have a WSUS with Samba 4?
>>>
>>> Yes, as long as you run it on a Windows Server, of course. :-)
>>>
>>>
>>> Regards,
>>> Marc
>>>
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>

Sketch

unread,
Jul 15, 2016, 1:20:03 PM7/15/16
to
On Fri, 15 Jul 2016, Thomas Maerz wrote:

> You can join a Windows Server to a Samba4 Domain controller and set up
> the WSUS server role and it should work. HOWEVER, if you are going to
> point all your devices at the WSUS server, you will require CALs for the
> devices or the users using them to maintain licensing compliance with
> Microsoft. At this point, you have paid for the number of Windows Server
> CALs you need to run actual Active Directory and may as well not use
> Samba at all as it is arguably less reliable (in some situations) and
> feature rich than a modern Microsoft AD implementation.

While that may sound like a good idea, you can't run WSUS on a domain
controller, so you're going to need at least two Windows servers.

You could run 2 windows servers on the same VM host so that they share the
same OS license. However, while I could be wrong, I don't think you can
share CALs that way.

That said, you can definitely run a WSUS server on a Samba 4 domain. All
of our DCs are S4, the only Windows server in our environement is a 2008
R2 VM running WSUS and centralized AV.

Thomas Maerz

unread,
Jul 15, 2016, 1:20:03 PM7/15/16
to
You should not need two servers. You can join a non-DC windows server to a Samba4 Domain and run WSUS on that without any Windows domain controllers at all. It sounds like he doesn’t have/want any windows servers at all, though so this may not be helpful anyway.

Thomas Maerz

unread,
Jul 15, 2016, 1:20:03 PM7/15/16
to
One more: https://wpkg.org/ <https://wpkg.org/>

Thomas Maerz
Network/Systems Administrator
Brewer Science, Inc.
A+ NET+ CCENT MCDST
tma...@brewerscience.com <mailto:tma...@brewerscience.com>
work: 573-364-0444 x1402
cell: 573-612-1349

CONFIDENTIALITY NOTICE
This message (and any of its attachments) is intended for the addressee and may contain confidential information, may be attorney-client privileged, and may constitute inside or non-public information under federal or state laws. Unauthorized use of this information is strictly prohibited and may be unlawful. If you have received this email transmission in error, please immediately notify the sender by return email, delete the email and any attachments, and empty any folders containing the discarded information.

> On Jul 15, 2016, at 11:53 AM, Thomas Maerz <tma...@brewerscience.com> wrote:
>
> Some things to check out for linux-based patch management of Windows (and other) clients: http://vfense.github.io/vFense/ <http://vfense.github.io/vFense/> <http://vfense.github.io/vFense/ <http://vfense.github.io/vFense/>> http://www.opsi.org/en <http://www.opsi.org/en> <http://www.opsi.org/en <http://www.opsi.org/en>>
>
> Thomas Maerz
> Network/Systems Administrator
> Brewer Science, Inc.
> A+ NET+ CCENT MCDST
> tma...@brewerscience.com <mailto:tma...@brewerscience.com> <mailto:tma...@brewerscience.com <mailto:tma...@brewerscience.com>>
> work: 573-364-0444 x1402
> cell: 573-612-1349
>
> CONFIDENTIALITY NOTICE
> This message (and any of its attachments) is intended for the addressee and may contain confidential information, may be attorney-client privileged, and may constitute inside or non-public information under federal or state laws. Unauthorized use of this information is strictly prohibited and may be unlawful. If you have received this email transmission in error, please immediately notify the sender by return email, delete the email and any attachments, and empty any folders containing the discarded information.
>
>> On Jul 15, 2016, at 11:44 AM, Carlos A. P. Cunha <carlos...@gmail.com <mailto:carlos...@gmail.com>> wrote:
>>
>> ok, I thought it might have something similar in Samba 4 with WSUS because my network does not have Windows Server.
>> Thank you
>>
>>
>> Em 15-07-2016 13:42, Thomas Maerz escreveu:
>>> You can join a Windows Server to a Samba4 Domain controller and set up the WSUS server role and it should work. HOWEVER, if you are going to point all your devices at the WSUS server, you will require CALs for the devices or the users using them to maintain licensing compliance with Microsoft. At this point, you have paid for the number of Windows Server CALs you need to run actual Active Directory and may as well not use Samba at all as it is arguably less reliable (in some situations) and feature rich than a modern Microsoft AD implementation.
>>>
>>> Thomas Maerz
>>>
>>>>
>>>> Hello,
>>>>
>>>> Am 15.07.2016 um 16:48 schrieb Carlos A. P. Cunha:
>>>>> It is possible to have a WSUS with Samba 4?
>>>>
>>>> Yes, as long as you run it on a Windows Server, of course. :-)
>>>>
>>>>
>>>> Regards,
>>>> Marc
>>>>
>>>> --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba> <https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>>

Achim Gottinger

unread,
Jul 15, 2016, 1:40:03 PM7/15/16
to

Am 15.07.2016 um 16:48 schrieb Carlos A. P. Cunha:
> Hello!
> It is possible to have a WSUS with Samba 4?
>
> Thanks
>
The wsus-offline project should work linux based.

http://www.wsusoffline.net/

This german article describs how to configure the linux side of things

http://www.computerwoche.de/a/wsus-offline-update-windows-pcs-bequem-updaten,3221657

We here need windows sql servers so we use wsus running on these.

To manage software on windows clients we use opsi. It can be used to
deploy wsus-offline updates aswell.

https://trac.dass-it.de/pub/wiki/opsi#wsusoffline (Can be this packaes
does no longer work it's from 2012)

Andrew Bartlett

unread,
Jul 15, 2016, 5:30:03 PM7/15/16
to
On Fri, 2016-07-15 at 13:34 -0300, Carlos A. P. Cunha wrote:
> Unfortunately I am not :-D
>
>
> Em 15-07-2016 13:32, Marc Muehlfeld escreveu:
> > Hello,
> >
> > Am 15.07.2016 um 16:48 schrieb Carlos A. P. Cunha:
> > > It is possible to have a WSUS with Samba 4?
> > Yes, as long as you run it on a Windows Server, of course. :-)
> >
> >
> > Regards,
> > Marc

It is good to hear the options suggested. One other project that I
understand is desired to become a WSUS server is wapt:

http://dev.tranquil.it/wiki/WAPT_-_apt-get_pour_Windows/en

When I spoke with the folks at Tranquil IT last year, they were very
excited about adding 'windows update' like support to it, but it is
still a prototype. (It would be great to see a dev community around
that!).

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
0 new messages