Integration with Active Directory Jeremy Allison Samba Team

More documents

Recommendations

Info

What do we mean by integration with anActive Directory Server ?•For a nonWindows client to integrate successfully into ActiveDirectory we need two operations to be seamless.•Authentication of Linux/UNIX accounts against Active Directory.•Enumeration of Linux/UNIX user and group directory information stored in anActive Directory store.•For authentication the preferred method is Kerberos 5 (the nativeWindows 2000 and above authentication method).•Microsoft Services for UNIX, LDAP or MSRPC can also be used here.•For user and group enumeration integration LDAP is the preferredmethod.•Microsoft Services for UNIX and MSRPC can also be used.
Kerberos AuthenticationIntegration•Active Directory Servers can beKerberos 5 KDC servers forLinux/UNIX clients.•MIT or Heimdal Kerberos serverscannot be complete KDC serversfor Windows clients due to themissing “extra” data field.•MIT or Heimdal KDC servers canbe set to “trust” AD Kerberosservers if the Windows and UNIXuser accounts are separated intoseparate “realms”.•In a more integrated environment itis probably easier to just use ActiveDirectory Kerberos Servers (asMicrosoft intended by “extending”the standard).
Page 1 and 2: Integration with ActiveDirectoryJer
Page 3 and 4: What is Active Directory ?Dynamic D
Page 5: Why must we use an Active Directory
Page 9 and 10: PAM - Pluggable Authentication Modu
Page 12 and 13: LDAP pam_ldap•Takes the users
Page 14 and 15: Integrating Windows User DirectoryS
Page 16 and 17: LDAP nss_ldap•Written by PADL
Page 18 and 19: Microsoft Services for UNIX nss_
Page 20 and 21: PADL solution•Modify Active Direc
Page 22 and 23: Services forUNIX solution•Uses ol
Page 24 and 25: Samba winbindsolution•Allows a Li
Page 26 and 27: Conclusions•Windows Active Direct

Integration with Active Directory Jeremy Allison Samba Team

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?