From owner-freebsd-questions@FreeBSD.ORG Wed Oct 3 02:58:15 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E912C16A418 for ; Wed, 3 Oct 2007 02:58:15 +0000 (UTC) (envelope-from sdafreebsduk@rowyerboat.com) Received: from doppler.zen.co.uk (doppler.zen.co.uk [212.23.3.27]) by mx1.freebsd.org (Postfix) with ESMTP id BA45013C448 for ; Wed, 3 Oct 2007 02:58:15 +0000 (UTC) (envelope-from sdafreebsduk@rowyerboat.com) Received: from [212.23.3.141] (helo=heisenberg.zen.co.uk) by doppler.zen.co.uk with esmtp (Exim 4.50) id 1Icu3k-0001mL-2X for freebsd-questions@freebsd.org; Wed, 03 Oct 2007 02:34:01 +0000 Received: from [82.70.166.86] (helo=[192.168.0.200]) by heisenberg.zen.co.uk with esmtp (Exim 4.50) id 1Icu3i-0004Jn-7j for freebsd-questions@freebsd.org; Wed, 03 Oct 2007 02:33:58 +0000 Message-ID: <4702FF8E.8000004@rowyerboat.com> Date: Wed, 03 Oct 2007 03:33:50 +0100 From: Stephen Allen User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070326 Thunderbird/2.0.0.0 Mnenhy/0.7.5.666 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Originating-Heisenberg-IP: [82.70.166.86] Subject: FreeBSD to authenticate against Active Directory X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Oct 2007 02:58:16 -0000 Hello, Is there any up-to-date definitive resource which explains how to get FreeBSD (6.2) to authenticate against Active Directory (in my case Windows 2003 R2 which includes SFU). There are a few informative articles floating around, but most date back to 2004/2005 and most involve the use of Samba and Winbind (I'd like to avoid this if possible). I don't really know what is possible here, I'm coming from only a basic understanding of how things like pam work. Would I have to configure every service separately to use Active Directory or could I tell FreeBSD to blindly rely on AD for user authentication? I read about pam_mkhomedir, so users could have homedirs created automatically when they logged in. Is this possible in FreeBSD? Would I be able to map this automatically to their existing "My Documents" folder which is redirected to the network by group policy? Please feel free to tell me what can/can't be done and if doing so is a good/bad thing. I can explain bits in more detail if needed. Kind regards, Steve