On Sun, Jun 18, 2023 at 6:48 AM Adam Williamson
<adamwill(a)fedoraproject.org> wrote:
On Sun, 2023-06-18 at 12:30 +0300, Alexander Bokovoy wrote:
...
> > I think we need to keep the release blocking state and
instead of
> > Windows test against Samba AD in Fedora. That was always the intent.
Was it? That's not my recollection; my memory is that we were always
intending to support enrolling to Microsoft AD-controlled domains. I
can't find the discussion in the archives, though - the 2014 version of
the tech spec says "Fedora Server will provide and support the realmd
project for joining FreeIPA and Active Directory domains
automatically", I can't find any references for how that got there,
though.
Testing against Samba AD would probably be significantly easier, but I
was kinda working on the basis that wasn't really what we wanted to do.
For the record, the statement was never "don't test against Samba AD",
it's that what we wanted to *block on* was the inability to connect to
a real Microsoft AD server, since that is (and remains) the most
prominent domain controller in the world.
At this point in history, I think we could happily add Samba AD as an
*additional* blocking target, but I really don't think it makes sense
to replace Microsoft AD.