On May 12, 2012 4:28 AM, "Matthew Thode" <prometheanfire@gentoo.org> wrote:
>
> On 05/11/2012 09:51 AM, Vinícius Ferrão wrote:
> > Hello Pandu,
> >
> > I have done a implementation using a daemon named sssd. It's sponsored
by the Fedora Project if I remember correctly.
> >
> > It supports 2008r2 AD without much hassle. I've setup everything
relying on LDAP for information and Kerberos for authentication. So you
don't need things like nss-ldap, nslcd, nscd and other old services. You
can handle almost everything with SSSD. And even better: SSSD supports
offline server authentication in the case of your AD is down or not
reachable at the moment.
> >
> > I can send you some links in the night (Brazilian night) when I will be
at home.
> >
> > Sent from my iPhone
> >
> > On 11/05/2012, at 00:36, Pandu Poluan <pandu@poluan.info> wrote:
> >
> >> Hello list,
> >>
> >> I just want to know, what is your recommendation(s) to implement
Active Directory authentication on Gentoo?
> >>
> >> I want to use AD not only for logins, but also for running
daemons/services.
> >>
> >> *Ideally*, it would also allow me to manage my boxen using GPO, but I
can live without that.
> >>
> >> Rgds,
> >
> I can attest to how awesome sssd is.  I use it for linux server to linux
> client, but the concept is still the same.
>

Ahaha, this is what I've been looking for: a recommendation backed by
experience ;-)

Thanks for the heads up, guys! Honestly, this is the first time I ever
heard of SSSD. Sounds very interesting... I'll certainly look into it.

Rgds,