Budgets
So this is how the budget turned out:
We are starting the Staff Training program!!
No new server.
No new backup, unless it’s donated. 
We should be able to replace all the old Windows 98 machines!!! 
We’re sticking with Samba/LDAP!
Exchange is no-go.
No new Church Management System, unless we go open source, and i don’t know of an OSS ChuMS that’s really any good.
And G4J is undergoing a major renovation. We still need to plan what that looks like, but whatever it looks like there won’t be any funds in the budget for it.
We’re upgrading our current phone system with whatever we can find on e-bay.
That about sums it up. Overall this next year there won’t be any major upgrades or changes to the network. Instead of upgrading I’m going to focus more on monitoring and evaluating what we have and how we use it. I want to make sure we are using everything we have to its full potential and in the right place.
We are sticking with Samba/LDAP but I want to make some changes to how that all works. I setup our Samba/LDAP server on OpenBSD, the most secure operating system in the world, but because OpenBSD is the most secure operating system in the world they leave things out that other OS’s might include that may cause some vulnerabilities. The problem is LDAP users can login to Samba, but they can’t login locally, or via ssh or other services. That’s because a Samba/LDAP configuration in Linux depends on nsswitch, and OpenBSD doesn’t include nsswitch or its equivalent. There is a _ldap-login that I have to use, but it’s still in early stages of development and not fully functional. So I’m either going to wait to see if the next OpenBSD implements more functionality for Samba/LDAP or I’ll move the whole thing over to a Linux box. When I get the HACKLAB setup I’ll probably use it to test different configurations.
You may want to consider using Trixbox (Asterisk VoIP PBX) for your phone system. You can build a system and buy phones for not much more buying an old hybrid on eBay.