LinuxSA Mailing list archives

  From: Matthew Geddes <mgeddes@tellurian.com.au>
  To  : David Drury <idavid@atdotdotnet.net>
  Date: 08 Jan 2003 12:20:05 +1030

Re: Authentication methods and Samba

On Wed, 2003-01-08 at 11:44, David Drury wrote:
> Greetings,
> I am in the process of setting up new Linux and Solaris servers. The 
> district auditors requirements are that we have centralised usernames and 
> passwords, but from a management point of view, it makes sense too. 

Makes sense, but has been the bane of Network Administrators since
networks came into existence :-)

> We already have an integrated Active Directory and NDS system in place, both 
> of which act as LDAP servers, so it makes obvious sense to use LDAP clients 
> for authentication. 
> 
> Do people have a recommendation for Linux and Solaris LDAP client. 

I personally always use OpenLDAP (www.openldap.org) with the nss_ldap
and pam_ldap modules (www.padl.com). I'm not a fan of Novell's
eDirectory on UNIX and haven't had much success with IBM's LDAP server.
The SunOne Directory Server (or whatever it's called this week - it was
originally Netscape Directory Server, I think) isn't too bad.

Where possible, I also like to have parts of my LDAP trees replicated to
each host that will be using it for authentication to keep network
traffic and authentication latency down to a minimum.

> I'd additionally like to make some of these servers members of the Native 
> mode Active Directory domain. Having read both Samba and Samba TNG 
> documentation, they are both unclear whether computers running either of 
> these products can be made members of a Win2K domain, or whether they are 
> limited to NT4 domains only. Could someone clarify this for me ? 

Samba 2.2.x can be made a member of an Active Directory, according to
the documentation and mailing lists. I've not ever tried myself though.

thx,
Matt

-- 
LinuxSA WWW: http://www.linuxsa.org.au/ IRC: #linuxsa on irc.openprojects.net
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject