[ILUG] Active Directory

[Matthew Gaylard]

If you have the misfortune of working in a "native-mode" Win2k domain it
may only support Microsoft's Kerberos implementation as the
authentication mechanism, in which case I think things can get awkward.

As I understand it, the Active Directory is used for access control,
rather than authentication per se.

Microsoft have made their extension to the krb5 ticket open - but not
for GPL software (samba). I'm not sure whether this is in fact an
obstacle or not, but I'd be very interested to hear in your progress, as
I'll be facing this issue soon - on one of the networks I have to plug
into the administrator has been threatening to go the Win2k krb only
route.


Matthew Gaylard 



-----Original Message-----
From: Tor Bendiksen [mailto:Tor_Bendiksen at ie.ibm.com]
Sent: 15 May 2002 09:52
To: Breathnach, Proinnsias (Dublin)
Cc: ilug at linux.ie
Subject: Re: [ILUG] Active Directory


>Does anyone know how easy or otherwise it is to get a Linux Box to
integrate
>into an XP network authenticating by Active Directory ?
>
>Where do I need to start looking etc ... ?
>
>P

If it's a standalone server / fileserver (ie. not a domain controller)
then
winbind is your friend. It's new in samba 2.2.3a (2.2.4 is just out). It
authenticates with AD/W2K PDC and with the help of PAM et al you can use
it
for lots of other services.. FTP, local logins etc..

-Tor


-- 
Irish Linux Users' Group: ilug at linux.ie
http://www.linux.ie/mailman/listinfo/ilug for (un)subscription
information.
List maintainer: listmaster at linux.ie
**************************************************************************************************
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system manager or  the 
sender immediately and do not disclose the contents to any one or make copies.

** This email was scanned for viruses, vandals and malicious content **
**************************************************************************************************