<br><br><div><span class="gmail_quote">On 23/08/07, <b class="gmail_sendername">Alain Williams</b> <<a href="mailto:addw@phcomp.co.uk">addw@phcomp.co.uk</a>> wrote:</span><blockquote class="gmail_quote" style="margin-top: 0; margin-right: 0; margin-bottom: 0; margin-left: 0; margin-left: 0.80ex; border-left-color: #cccccc; border-left-width: 1px; border-left-style: solid; padding-left: 1ex">
On Thu, Aug 23, 2007 at 09:43:01AM +0100, Mark Stewart wrote:<br>> Hi Guys,<br>><br>> Any experience/advice on<br>> authenticatiing various Linux flavours against M$ Active Directory<br>> rather than OpenLDAP appreciated.
<br><br>I have done it for email purposes - ie look up local email address in M$AD<br>to ensure that it is valid & which exchange server to deliver to.<br><br>> I gave heard<br>> M$ offer Unix Services that extends the AD schema to support Linux account
<br>> authentication but want to avoid this.<br><br>Why do you want to avoid it ?<br>One thing that you do need are the extra bits of Unixy stuff such as<br>values for $HOME, uid, groups, ... Where do you propose to get them from if
<br>not from M$AD ? You could have parallel registration (ie both /etc/passwd<br>& M$AD) but that would be a complete pain if you have more than a few users.</blockquote><div><br>I don't mind extending the schema but didn't like the idea of buying M$ Unix services to do it, if it works out that I need to buy this product then so be it. Its a learning excercise to find the best way to do this.
<br>My only requirement is the Redhat + Solaris + Possible other flavours of Linux can authenticate against windows and account management takes place via M$ AD! <br> </div><br><blockquote class="gmail_quote" style="margin-top: 0; margin-right: 0; margin-bottom: 0; margin-left: 0; margin-left: 0.80ex; border-left-color: #cccccc; border-left-width: 1px; border-left-style: solid; padding-left: 1ex">
--<br>Alain Williams<br>Linux Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer.<br>+44 (0) 787 668 0256 <a href="http://www.phcomp.co.uk/">http://www.phcomp.co.uk/</a><br>Parliament Hill Computers Ltd. Registration Information:
<a href="http://www.phcomp.co.uk">http://www.phcomp.co.uk</a>/contact.php<br>Chairman of UKUUG: <a href="http://www.ukuug.org/">http://www.ukuug.org/</a><br>#include <std_disclaimer.h><br><br>______________________________
_________________<br>Watford mailing list<br><a href="mailto:Watford@mailman.lug.org.uk">Watford@mailman.lug.org.uk</a><br><a href="https://mailman.lug.org.uk">https://mailman.lug.org.uk</a>/mailman/listinfo/watford<br></blockquote>
</div><br>