1 |
Hello Rene, |
2 |
|
3 |
I have actually set this up as an NT domain, as close to ADS as I could |
4 |
possibly get. The implementation was a little tricky, but it involves |
5 |
(heimdal)kerberos, sasl, openldap, pam, djbdns, dhcp, and samba. A web |
6 |
document I had found helped me significantly when I approached technical |
7 |
issues: |
8 |
http://www.opentechnet.com/auth-howto/ |
9 |
|
10 |
Along the lines of replacing ADS, I think this is as close as you may get. |
11 |
The thing that sets Microsoft's ADS apart is that they use a form of Remote |
12 |
Procedure Calls that implements a lot of the leg work. This makes microsoft |
13 |
incompatible against samba. |
14 |
|
15 |
In AD mode, a Microsoft computer won't authenticate against a linux host |
16 |
(though it would as a PDC in NT mode) since it would be trying to communicate |
17 |
in misc forms of RPC talk. On the flip side, it should be possible to |
18 |
authenticate samba against ADS. Here is a tool that allows for flexibilty |
19 |
with authentication under windows: |
20 |
http://pgina.xpasystems.com/info/ |
21 |
|
22 |
As far as drawbacks, that's it. I haven't seen anything wrong with doing it |
23 |
NT style, and with all of the added bells and whistles. |
24 |
|
25 |
I don't know the specifics, but the SMB-TNG is a lot more bleeding edge |
26 |
technology when it comes to samba in an enterprise environment. It may |
27 |
provide you with a solution closer to what you are looking for: |
28 |
http://www.samba-tng.org |
29 |
|
30 |
I had a lot of fun setting this up! ;) |
31 |
|
32 |
Regards, |
33 |
|
34 |
Robert |
35 |
|
36 |
|
37 |
On Monday 25 April 2005 04:25 am, Rene Zbinden wrote: |
38 |
> Has anyone experience using samba as PDC and BDC with OpenLDAP as backend? |
39 |
> Is it possible to totally go away from Windows Active Directories Servers |
40 |
> to the above solution? What are the Drawbacks? |
41 |
> -- |
42 |
> cheers, |
43 |
> rene |
44 |
|
45 |
-- |
46 |
gentoo-server@g.o mailing list |