Table of contents
- 1. Notes
Samba can be used as a domain controller but configuring such a beast is really hard work. A general network services appliance preconfigured as a drop in replacement for a windows domain controller and general authentication server would be really useful.
Notes
I've heard Samba4 will have native support to be a 2k3'ish DC. I'm working more and more w/ OpenLDAP to act as a proxy for other LDAP servers like AD, so I'll help out where I can. Also look into other LDAP servers like OpenDS, Penrose, Fedora DS and maybe even Sun One, (its free but only has binaries for MS and RPM based distos). Mabe even incorporate items like phpLDAPadmin as the webui or bundle jXplorer considering its a desktop app that runs on Linux and Windows.
-- Patrick

Comments
In MS AD what I don't like are NTFS permissions propagating and locking down various files and directories even when storage is directly mounted. Also, the recomendation that DC's not be virtualized means that single purpose machines often need to be run simply for redundancy..
A multi DC Samba sounds great.