Upgrade overview for computers with Centrify-enabled Samba

Beginning in calendar year 2016, Centrify neither provides nor supports the Centrify-enabled version of Samba that was available earlier. Instead, Centrify now provides a standalone adbindproxy package containing the components that are necessary for Centrify Authentication Service, Privilege Elevation Service, and Audit & Monitoring Service to integrate with open-source Samba.

If you are currently using Centrify-enabled Samba with Centrify Server Suite 2013.3 or later (Centrify Authentication Service, Privilege Elevation Service, and Audit & Monitoring Service), not only do you need to upgrade to the latest DirectControl agent but there are some additional steps to migrate your users and settings. Below is an overview of what you need to do on each agent-controlled Linux and UNIX computer that was integrated with Samba.

Make sure that you have the software you need.

Make sure that you have the latest version of the DirectControl agent, the Centrify adbindproxy package, and the open source Samba files.

Make a backup copy of your smb.conf file.

 

Uninstall Centrify-enabled Samba.

For example, on most Linux variants you would issue the following command:

  rpm -e CentrifyDC-samba

Upgrade the DirectControl agent so that it’s either the latest version or a version later than 2013.3.

Refer to the Centrify Authentication Service, Privilege Elevation Service, and Audit & Monitoring Service documentation for instructions.

Install open source Samba.

All major UNIX and Linux distributions have Samba as a native package. See your distributor’s package or port system for a native install of Samba on your system. You can also visit https://samba.plus/ which offers Samba packages for Red Hat Linux, SUSE Linux Enterprise Server, and Debian.

Install the Centrify adbindproxy package.

See Installing the adbindproxy components

Migrate Samba users to Active Directory.

See Migrating existing Samba users to Centrify

Note: If you’re using Auto Zone or Centrify Express, user migration is not supported.

Run the adbindproxy.pl script.

See Configuring the Samba integration

Modify the Samba configuration file, as needed.

See Modifying the Samba smb.conf configuration file.

Test and verify the configuration.

See Verifying the Samba integration