Ubuntu 21.04 released! Active Directory Integration by default!

[suicidalfranco]

4 hours ago, WereCatf said:

Also, years ago already.

Not even years, they removed it six months after the release that included the amazon lens. 

Tbh one of the things I miss from unity are the lenses

[HomeBoi]

21 hours ago, rcmaehl said:

I mean with CentOS dead as of December, I'm glad to see other Distros stepping up their enterprise game.

What. RedHat is still a thing i manage and admin every day and it is basically the enterprise paid for version of CentOS.

[WereCatf]

1 minute ago, HomeBoi said:

and it is basically the enterprise paid for version of CentOS.

So it's not CentOS and the point stands.

[HomeBoi]

Just now, WereCatf said:

So it's not CentOS and the point stands.

Well in my world enterprise, which was the functionality mentioned that made centOS interesting for peeps I guess, means paid functionality. And if RH = COS i don't see the issue. I know COS was good but c'mon.

[LogicalDrm]

@WolframaticAlpha, several of your posts have been merged. Please use Multiquote to avoid triple and quadruple posting. (Same goes to you @leadeater)

[leadeater]

34 minutes ago, HomeBoi said:

Well in my world enterprise, which was the functionality mentioned that made centOS interesting for peeps I guess, means paid functionality. And if RH = COS i don't see the issue. I know COS was good but c'mon.

Well I mean one of the points to going with RHEL is the actual support you get with it, and the support tools installed with the OS to generate support bundles to upload when making a support case. Then there is all the documentation they provide. Then the supporting management products like Red Hat Satellite, or ready to roll solutions like Red Hat Storage Server.

 

Other than the support you can do basically everything yourself but what attracts businesses to such products and support models is is the known and verified best practice configurations and a company willing to actually stand behind it, it's a trust thing.

 

These things and others like it might seem rather minor to many but to people like us that have to support more than just a few VMs/OS's and a wide array of applications anything that makes our life easier, lessens deployment and support time and decreases fault resolution time is simply worth the money.

 

Nothing in life is free, your time is worth something so never discount and devalue that.

[igormp]

5 hours ago, WolframaticAlpha said:

Well I did put compare that to arch in there, so....

You do know that Arch is following some steps that ubuntu took? As an example, they'll be enabling LTO which is the default on ubuntu now.

 

5 hours ago, WolframaticAlpha said:

Overall, pop and mint are much better. But Ubuntu is ok.

Those 3 are pretty much the same thing with some minor default settings differences and their own repos.

[WolframaticAlpha]

1 hour ago, LogicalDrm said:

@WolframaticAlpha, several of your posts have been merged. Please use Multiquote to avoid triple and quadruple posting. (Same goes to you @leadeater)

Sorry

[bcredeur97]

15 hours ago, anodos said:

At work we use Puppet for managing updates across >10,000 servers. We maintain our own package repos so we can make sure we're only installing tested versions of various packages. It works pretty well, and I can't recall too many times when it broke anything.

puppet kind of like ansible? Seems like a whole automation platform type of thing

[jagdtigger]

11 hours ago, WolframaticAlpha said:

Well, Ubuntu embeds ads in some terminal tools and serves up user data to amazon

The first one i guess refers to the link in motd, sorry to burst your bubbles but those are ubuntu wiki/blog links ran through a shortener. Not much of an ad if you ask me. The second allegation is ancient and not the case anymore AFAIK.

[da na]

That's great! Wish I could use higher than 14.04 on my hardware... 

[leadeater]

On 4/24/2021 at 5:56 AM, bcredeur97 said:

puppet kind of like ansible? Seems like a whole automation platform type of thing

Puppet has an agent you install and does regular check-ins to make sure it is compliant with the configuration baseline. Ansible has no agent and is a push configuration model, can the scheduled/automated, but is targeting a different purpose.

 

Puppet is great for application management i.e. JVM maximum memory, application log configuration settings, application configuration in general, what applications and which version should be installed.

Ansible is great for deployment and configuration i.e. Standardized OS or configuring a network switch port.

[Master Disaster]

Canonical didn't build the AD integration, SAMBA has had the ability to both join a domain and act as a domain controller for a fairly long time now, it just ships disabled by default and IIRC had a few limitations over a Windows Server ADDC.

[leadeater]

1 hour ago, Master Disaster said:

Canonical didn't build the AD integration, SAMBA has had the ability to both join a domain and act as a domain controller for a fairly long time now, it just ships disabled by default and IIRC had a few limitations over a Windows Server ADDC.

Yep, it's just really nice that it's an install time option now with the configuration guided. Are we sure it's SAMBA/Winbind though? We use SSSD for AD authentication on our RHEL and Ubuntu servers not SAMBA.

 

Edit:

It's seems like it most likely realmd which configures all of the above mentioned.

[Master Disaster]

8 hours ago, leadeater said:

Yep, it's just really nice that it's an install time option now with the configuration guided. Are we sure it's SAMBA/Winbind though? We use SSSD for AD authentication on our RHEL and Ubuntu servers not SAMBA.

 

Edit:

It's seems like it most likely realmd which configures all of the above mentioned.

TBF, SSSD would make more sense than SAMBA. I'll be honest though and admit, I wasn't aware that SSSD had that ability at all (I'm aware of SSSD but have never played with it) and I assumed SAMBA since SAMBA is included in a standard install OOTB.

 

I actually wouldn't be surprised if Cannonical has built something specific to Ubuntu/Ubiquiti, they've been getting a fair bit of flack recently for this type of behaviour but even then, it will still be a fork of some existing project.

 

My Ubuntu server stays on LTS releases anyway but I might have a play with this in a VM. I wonder if the next LTS server release will include an option to act as an ADDC during installation? That would be cool. (Heres where you tell me you can install SSSD and do that already and I just didn't know about it )

[leadeater]

14 minutes ago, Master Disaster said:

(Heres where you tell me you can install SSSD and do that already and I just didn't know about it

Nope, that's only SAMBA server.

 

Reason why I says it's most likely realmd

Quote

For example, realmd can easily configure:

PAM Stack
NSS Layer
Kerberos
SSSD
Winbind

 

And is simple as running

realm join win.striker.local

 

And it's configured the above just like that, of course you can then customize the configuration of each of them after that etc. Unless I'm forgetting we don't use realmd but I'm thinking we should switch to using that instead of how we do it now.

[WolframaticAlpha]

On 4/23/2021 at 11:42 PM, jagdtigger said:

The first one i guess refers to the link in motd, sorry to burst your bubbles but those are ubuntu wiki/blog links ran through a shortener. Not much of an ad if you ask me. The second allegation is ancient and not the case anymore AFAIK.

Do you even read anything? I admitted to being an asshole. Can you shut up now? Let me have some peace?

 

Please read my further messages before commenting anything.

[WereCatf]

4 minutes ago, WolframaticAlpha said:

I admitted to being an asshole.

Nah, you weren't an asshole. Stubborn, yes, but that I can understand.