[gentoo-user] [OT] linux authentication server

[gentoo-user] [OT] linux authentication server

[Iain Buchanan]

Hi all,

this one's a bit OT...

I have a linux server and multiple (<10) windows xp clients.  So far,
each windows client has it's own user and password info stored on it.
This slowly becomes harder to manage as a user has to have an account on
each machine, and has to change passwords in multiple places.

Therefore, I'm looking for an active directory kindof server for linux.
I have minimal experience with AD, if it even is available the way I
think it is for linux, but I have no doubt I can pick up the
administration.  Your opinion on your favourite, and why, would be very
useful to me.  Any tips / howto would also be great.

thanks!
-- 
Iain Buchanan <iaindb at netspace dot net dot au>

My philosophy is: Don't think.
		-- Charles Manson

-- 
gentoo-user@gentoo.org mailing list

RE: [gentoo-user] [OT] linux authentication server

[Wayne Oliver]

> -----Original Message-----
> From: Iain Buchanan [mailto:iaindb@netspace.net.au]
> Sent: 10 May 2007 09:13
> To: gentoo-user@lists.gentoo.org
> Subject: [gentoo-user] [OT] linux authentication server
> 
> Hi all,
> 
> this one's a bit OT...
> 
> I have a linux server and multiple (<10) windows xp clients.  So far,
> each windows client has it's own user and password info stored on it.
> This slowly becomes harder to manage as a user has to have an account
on
> each machine, and has to change passwords in multiple places.
> 
> Therefore, I'm looking for an active directory kindof server for
linux.
> I have minimal experience with AD, if it even is available the way I
> think it is for linux, but I have no doubt I can pick up the
> administration.  Your opinion on your favourite, and why, would be
very
> useful to me.  Any tips / howto would also be great.
> 
> thanks!

Hi Iain,

Take a look at SAMBA, if you have limited experience with AD type stuff
it may even be better to run your small network using an NT4 style
domain.

Regards,
Wayn0
--
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] [OT] linux authentication server

[Daniel Iliev]

On Thu, 10 May 2007 16:42:48 +0930
Iain Buchanan <iaindb@netspace.net.au> wrote:

> Hi all,
> 
> this one's a bit OT...
> 
> I have a linux server and multiple (<10) windows xp clients.  So far,
> each windows client has it's own user and password info stored on it.
> This slowly becomes harder to manage as a user has to have an account
> on each machine, and has to change passwords in multiple places.
> 
> Therefore, I'm looking for an active directory kindof server for
> linux. I have minimal experience with AD, if it even is available the
> way I think it is for linux, but I have no doubt I can pick up the
> administration.  Your opinion on your favourite, and why, would be
> very useful to me.  Any tips / howto would also be great.
> 
> thanks!


A possible free solution is using samba as PDC and an LDAP
authentication. Check theese out:

http://www.openldap.org/doc/admin23/index.html
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/

Gentoo specific:
http://www.gentoo.org/doc/en/ldap-howto.xml
http://www.gentoo.org/doc/en/quick-samba-howto.xml


-- 
Best regards,
Daniel

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] [OT] linux authentication server

[Dirk Heinrichs]

[-- Attachment #1: Type: text/plain, Size: 1703 bytes --]

Am Donnerstag, 10. Mai 2007 schrieb ext Daniel Iliev:
> On Thu, 10 May 2007 16:42:48 +0930
>
> Iain Buchanan <iaindb@netspace.net.au> wrote:
> > Hi all,
> >
> > this one's a bit OT...
> >
> > I have a linux server and multiple (<10) windows xp clients.  So far,
> > each windows client has it's own user and password info stored on it.
> > This slowly becomes harder to manage as a user has to have an account
> > on each machine, and has to change passwords in multiple places.
> >
> > Therefore, I'm looking for an active directory kindof server for
> > linux. I have minimal experience with AD, if it even is available the
> > way I think it is for linux, but I have no doubt I can pick up the
> > administration.  Your opinion on your favourite, and why, would be
> > very useful to me.  Any tips / howto would also be great.
> >
> > thanks!
>
> A possible free solution is using samba as PDC and an LDAP
> authentication. Check theese out:

Since Win XP also uses Kerberos 5 for authorization, adding a KRB 5 server 
to this may also be a good idea. Avoids to have passwords accessible 
anywhere (even not in encrypted form) and allows for true "single sign on".

> http://www.openldap.org/doc/admin23/index.html
> http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/

http://sial.org/howto/kerberos/windows/

Bye...

	Dirk
-- 
Dirk Heinrichs          | Tel:  +49 (0)162 234 3408
Configuration Manager   | Fax:  +49 (0)211 47068 111
Capgemini Deutschland   | Mail: dirk.heinrichs@capgemini.com
Wanheimerstraße 68      | Web:  http://www.capgemini.com
D-40468 Düsseldorf      | ICQ#: 110037733
GPG Public Key C2E467BB | Keyserver: www.keyserver.net

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 189 bytes --]