<div>There's some stuff on my site :</div>
<div> </div>
<div>You can do it with kerberos / ldap (or ldap / ldap if you really want) :</div>
<div> </div>
<div><a href="http://www.osiconsulting.co.uk/solutions/linuxldap.html">http://www.osiconsulting.co.uk/solutions/linuxldap.html</a></div>
<div> </div>
<div>Or use NIS and Windows Services for Unix :</div>
<div> </div>
<div><a href="http://www.osiconsulting.co.uk/solutions/servforuindex.html">http://www.osiconsulting.co.uk/solutions/servforuindex.html</a></div>
<div> </div>
<div>Windows Server 2003 R2 domains have the schema extensions already built in. Previous to that you would have to extend the schema.<br><br> </div>
<div><span class="gmail_quote">On 23/08/07, <b class="gmail_sendername">Alain Williams</b> <<a href="mailto:addw@phcomp.co.uk">addw@phcomp.co.uk</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">On Thu, Aug 23, 2007 at 09:43:01AM +0100, Mark Stewart wrote:<br>> Hi Guys,<br>><br>> Any experience/advice on
<br>> authenticatiing various Linux flavours against M$ Active Directory<br>> rather than OpenLDAP appreciated.<br><br>I have done it for email purposes - ie look up local email address in M$AD<br>to ensure that it is valid & which exchange server to deliver to.
<br><br>> I gave heard<br>> M$ offer Unix Services that extends the AD schema to support Linux account<br>> authentication but want to avoid this.<br><br>Why do you want to avoid it ?<br>One thing that you do need are the extra bits of Unixy stuff such as
<br>values for $HOME, uid, groups, ... Where do you propose to get them from if<br>not from M$AD ? You could have parallel registration (ie both /etc/passwd<br>& M$AD) but that would be a complete pain if you have more than a few users.
<br><br>--<br>Alain Williams<br>Linux Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer.<br>+44 (0) 787 668 0256 <a href="http://www.phcomp.co.uk/">http://www.phcomp.co.uk/</a><br>Parliament Hill Computers Ltd. Registration Information:
<a href="http://www.phcomp.co.uk/contact.php">http://www.phcomp.co.uk/contact.php</a><br>Chairman of UKUUG: <a href="http://www.ukuug.org/">http://www.ukuug.org/</a><br>#include <std_disclaimer.h><br><br>_______________________________________________
<br>Watford mailing list<br><a href="mailto:Watford@mailman.lug.org.uk">Watford@mailman.lug.org.uk</a><br><a href="https://mailman.lug.org.uk/mailman/listinfo/watford">https://mailman.lug.org.uk/mailman/listinfo/watford</a>
<br></blockquote></div><br>