Re: [gentoo-server] Active Directory Based Authentication?

[Matthew Thode]

On 05/11/2012 09:51 AM, Vinícius Ferrão wrote:
> Hello Pandu,
>
> I have done a implementation using a daemon named sssd. It's sponsored by the Fedora Project if I remember correctly.
>
> It supports 2008r2 AD without much hassle. I've setup everything relying on LDAP for information and Kerberos for authentication. So you don't need things like nss-ldap, nslcd, nscd and other old services. You can handle almost everything with SSSD. And even better: SSSD supports offline server authentication in the case of your AD is down or not reachable at the moment.
>
> I can send you some links in the night (Brazilian night) when I will be at home.
>
> Sent from my iPhone
>
> On 11/05/2012, at 00:36, Pandu Poluan <pandu@××××××.info> wrote:
>
>> Hello list,
>>
>> I just want to know, what is your recommendation(s) to implement Active Directory authentication on Gentoo?
>>
>> I want to use AD not only for logins, but also for running daemons/services.
>>
>> *Ideally*, it would also allow me to manage my boxen using GPO, but I can live without that.
>>
>> Rgds,
>
I can attest to how awesome sssd is.  I use it for linux server to linux
client, but the concept is still the same.

-- 
-- Matthew Thode (prometheanfire)