Integration with Active Directory Jeremy Allison Samba Team

More documents

Recommendations

Info

Integrating Windows User DirectoryServices with Linux/UNIX•Linux/UNIX systems started with only local directory listings (localfiles) and have since had to develop standardized pluginarchitectures to allow replacement of the directory service with anycompatible server (no hidden protocols).•NSS (Name Service Switch).•NSS allows user and group lookup and enumeration to be donevia many different directory services. The order in which they arequeried can be changed.•The nss modules that are of interest for Active DirectoryIntegration are :– nss_ldap– nss_winbind
NSS – Name Service SwitchApplicationNSSrequestNSS requests can look up user, group, orenumerate the user or group lists.NSS library (libc)ModuleStackNSS libraryNSS libraryNSS libraryApplicationlookup/etc/nsswitch.confExternal lookup(NIS)Local fileslookupExternal lookup(winbind)
Page 1 and 2: Integration with ActiveDirectoryJer
Page 3 and 4: What is Active Directory ?Dynamic D
Page 5 and 6: Why must we use an Active Directory
Page 7 and 8: Kerberos AuthenticationIntegration
Page 9 and 10: PAM - Pluggable Authentication Modu
Page 12 and 13: LDAP pam_ldap•Takes the users
Page 16 and 17: LDAP nss_ldap•Written by PADL
Page 18 and 19: Microsoft Services for UNIX nss_
Page 20 and 21: PADL solution•Modify Active Direc
Page 22 and 23: Services forUNIX solution•Uses ol
Page 24 and 25: Samba winbindsolution•Allows a Li
Page 26 and 27: Conclusions•Windows Active Direct

Integration with Active Directory Jeremy Allison Samba Team

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?