| dpcmiller -> Other options for Active Directory integration (Jun. 30, '05, 11:47:45 AM) |
Following up on the previous post, there are at least a couple of other options for using Active Directory authentication for HP-UX and other UNIX / Linux systems.
Centrify has a commercial solution that allows UNIX, Linux and Mac systems to use Active Directory as a central authentication, authorization and policy server. It does not require schema extensions in AD. It also provides authentication modules for Apache, Tomcat, JBoss, etc.
The other option of course is to do this with Open Source and use the latest Samba plus a recent build of Kerberos. The Samba-3 By Example guide has instructions. Also see the online Samba HowTO docs at http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html#ads-member.
This works very well but you need to make sure Kerberos is set up just right, time is in sync etc. This approach also does not require schema extensions and instead stores user information locally on each UNIX / Linux system (which means UIDs are not necessarily the same across each system joined to the domain).
I have created some scripts to automate the setup of Samba / Kerberos and the joining to an AD domain. If anyone is interested, drop me an email at .
Doug Miller |
|
|
|