[gentoo-user] Easily coping with a domain password

[Alan McKinnon <alan.mckinnon@gmail.com>]

Hi,

Some weeks go well, some don't. For me, this one isn't.

The AD at work was moaning that I needed to change the password, which I duly 
did under protest. Then all hell broke loose. 30 seconds later the account 
was locked. 

That turned out to be kontact checking Exchange once a minute when I thought I 
had unset auto checks. Phoned IT, got the account unlocked. And it happened 
again, this time kwallet had cached something. Fixed by manually going 
through everything in kwallet, changing all old passwords I found. And I got 
locked out a third time, which appears to be due to ldap lookups (more than 
one). $DEITY only knows where these are coming from, I've been doing some 
experimenting lately....

IT are getting a wee bit upset with me, and this happens regularly once a 
month but today was especially bad. Methinks I should consolidate all the 
many apps and URLs that auth against the domain. And I'm wondering how best 
to do this as I'm clueless about it actually - I normally avoid MS stuff like 
the plague.

Should I be looking into winbind?
Or configure kerberos to join the domain and have all my apps use that?
Some ldap-proxy type setup?

Pointers to howtos and opinions on what's worth the effort are all that I'm 
after today - I can read the details in the man pages myself once I have a 
known direction to follow. If my three ideas above sound stupid, that's 
because they probably are :-)

-- 
alan dot mckinnon at gmail dot com