Re: Active Directory Based Authentication?

--KrHCbChajFcK0yQE
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Pandu Poluan <[email protected]> 2012-05-11 10:36:
>   Hello list,
>
>   I just want to know, what is your recommendation(s) to implement Active
>   Directory authentication on Gentoo?

Attribute data can be stored/retrieved in ldaps (as in AD usually only=20
allows authenticated binds to retrieve data and it requires an ssl=20
connection to do that, other than that it's really just ldap).

Authentication can be done either via ldaps or kerberos, though I=20
personally find the later to be extra complication that's usually=20
unnecessary.

As someone else mentioned, there's a wealth of data out there on how to=20
do this in any number of schemes (eg: libnss-ldap, libpam-ldap, sssd,=20
etc.).

>   I want to use AD not only for logins, but also for running
>   daemons/services.

I don't see the distinction.  Either way it seems you're concerned with=20
authenticating users and doing attribute lookups on them.

>   *Ideally*, it would also allow me to manage my boxen using GPO, but I c=
an
>   live without that.

I'm not personally aware of anything that does that.  If there is, it's=20
probably something like redhat/suse specific.

However, I believe it is possible to use a samba4 host as a domain=20
controller to serve GPs to windows clients.

Cheers,
Brian

--KrHCbChajFcK0yQE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk+tImYACgkQdtkBin+QuSDd5QCgwR87Or7Uhdadx6+x0z1yAh28
Dq8An0tI+K+REhUgmnXpbXQiiyoHDQVw
=gVJC
-----END PGP SIGNATURE-----

--KrHCbChajFcK0yQE--