From owner-freebsd-questions@FreeBSD.ORG  Mon Jul  7 14:13:06 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5D235106564A
	for <freebsd-questions@freebsd.org>;
	Mon,  7 Jul 2008 14:13:06 +0000 (UTC)
	(envelope-from cedwards@smartechcorp.net)
Received: from mail2.smartechcorp.net (mail2.smartechcorp.net [64.203.98.242])
	by mx1.freebsd.org (Postfix) with ESMTP id 349278FC1F
	for <freebsd-questions@freebsd.org>;
	Mon,  7 Jul 2008 14:13:06 +0000 (UTC)
	(envelope-from cedwards@smartechcorp.net)
Received: from ChrisEdwards (nat2.smartechcorp.net [64.203.96.67])
	by mail2.smartechcorp.net (Postfix) with ESMTP id 6DCED78C777;
	Mon,  7 Jul 2008 10:13:05 -0400 (EDT)
From: "Chris Edwards" <cedwards@smartechcorp.net>
To: "'Tom McLaughlin'" <tmclaugh@sdf.lonestar.org>
References: <0d1f01c8d7c1$bcf79020$36e6b060$@net>
	<1214929824.3394.6.camel@tomcat.straycat.dhs.org>
In-Reply-To: <1214929824.3394.6.camel@tomcat.straycat.dhs.org>
Date: Mon, 7 Jul 2008 10:12:58 -0400
Message-ID: <078501c8e03b$8f2a8580$ad7f9080$@net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acjbl9MzdrC6m2BdQ4Gfvv9j3qJKFwEo3jCg
Content-Language: en-us
Cc: freebsd-questions@freebsd.org
Subject: RE: FreeBSD and Active Directory
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Jul 2008 14:13:06 -0000

Well I figured at all out using Samba's WinBind and Kerberos.   I will post
the docs today or tomorrow, after I write them, to my blog at
http://www.ctdx.net for everyones viewing pleasure.


---

Chris Edwards
Smartech Corp.
Div. of AirNet Group
http://www.airnetgroup.com
http://www.smartechcorp.net
cedwards@smartechcorp.net
P:  423-664-7678 x114
C:  423-593-6964
F:  423-664-7680


-----Original Message-----
From: owner-freebsd-questions@freebsd.org
[mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Tom McLaughlin
Sent: Tuesday, July 01, 2008 12:30 PM
To: Chris Edwards
Cc: freebsd-questions@freebsd.org
Subject: Re: FreeBSD and Active Directory


On Thu, 2008-06-26 at 15:20 -0400, Chris Edwards wrote: 
> I have been put in charge of creating a single sign-on mechanism for our
> Windows 2003 and FreeBSD servers.  We are wanting to use Active Directory
as
> our LDAP server.  I know of four different methods that could possibly
work.
> 
> 1. OpenLDAP
> 2. Radius
> 3. NIS
> 4. WinBind / Samba
> 
> Which is the most excepted/supported way to do this?  Several of the
severs
> are very old, 4+ years old.
> 
> Thanks for any help,
> 
> ---
> 
> Chris Edwards

You need to handle two things, user identification and user
authentication.  OpenLDAP (actually nss_ldap) will do the id part and
kerberos will do the authentication part.  Unfortunately my AD related
links for this are at work and I'm at home today.

tom

-- 
| tmclaugh at sdf.lonestar.org                 tmclaugh at FreeBSD.org |
| FreeBSD                                       http://www.FreeBSD.org |

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"