Re: Active Directory Based Authentication?
Vinícius Ferrão <[email protected]> Fri, 11 May 2012 11:51:59 -0300
| Newsgroups | gmane.linux.gentoo.server |
|---|---|
| Message-ID | <[email protected]> |
--Apple-Mail-BFBE06CC-B1CD-4B54-B194-D0A4363B5A6D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hello Pandu, I have done a implementation using a daemon named sssd. It's sponsored by th= e Fedora Project if I remember correctly. It supports 2008r2 AD without much hassle. I've setup everything relying on L= DAP for information and Kerberos for authentication. So you don't need thing= s like nss-ldap, nslcd, nscd and other old services. You can handle almost e= verything with SSSD. And even better: SSSD supports offline server authentic= ation in the case of your AD is down or not reachable at the moment. I can send you some links in the night (Brazilian night) when I will be at h= ome. Sent from my iPhone On 11/05/2012, at 00:36, Pandu Poluan <[email protected]> wrote: > Hello list, >=20 > I just want to know, what is your recommendation(s) to implement Active Di= rectory authentication on Gentoo? >=20 > I want to use AD not only for logins, but also for running daemons/service= s. >=20 > *Ideally*, it would also allow me to manage my boxen using GPO, but I can l= ive without that. >=20 > Rgds, --Apple-Mail-BFBE06CC-B1CD-4B54-B194-D0A4363B5A6D Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=utf-8 <html><head></head><body bgcolor="#FFFFFF"><div>Hello Pandu,</div><div><br></div><div>I have done a implementation using a daemon named sssd. It's sponsored by the Fedora Project if I remember correctly.</div><div><br></div><div>It supports 2008r2 AD without much hassle. I've setup everything relying on LDAP for information and Kerberos for authentication. So you don't need things like nss-ldap, nslcd, nscd and other old services. You can handle almost everything with SSSD. And even better: SSSD supports offline server authentication in the case of your AD is down or not reachable at the moment.</div><div><br></div><div>I can send you some links in the night (Brazilian night) when I will be at home.<br><br>Sent from my iPhone</div><div><br>On 11/05/2012, at 00:36, Pandu Poluan <<a href= "mailto:[email protected]">[email protected]</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div><p>Hello list,</p> <p>I just want to know, what is your recommendation(s) to implement Active Directory authentication on Gentoo?</p> <p>I want to use AD not only for logins, but also for running daemons/services.</p> <p>*Ideally*, it would also allow me to manage my boxen using GPO, but I can live without that.</p> <p>Rgds,<br> </p> </div></blockquote></body></html> --Apple-Mail-BFBE06CC-B1CD-4B54-B194-D0A4363B5A6D--