Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 01 Jul 2008 12:30:23 -0400
From:      Tom McLaughlin <tmclaugh@sdf.lonestar.org>
To:        Chris Edwards <cedwards@smartechcorp.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: FreeBSD and Active Directory
Message-ID:  <1214929824.3394.6.camel@tomcat.straycat.dhs.org>
In-Reply-To: <0d1f01c8d7c1$bcf79020$36e6b060$@net>
References:  <0d1f01c8d7c1$bcf79020$36e6b060$@net>

next in thread | previous in thread | raw e-mail | index | archive | help

On Thu, 2008-06-26 at 15:20 -0400, Chris Edwards wrote: 
> I have been put in charge of creating a single sign-on mechanism for our
> Windows 2003 and FreeBSD servers.  We are wanting to use Active Directory as
> our LDAP server.  I know of four different methods that could possibly work.
> 
> 1. OpenLDAP
> 2. Radius
> 3. NIS
> 4. WinBind / Samba
> 
> Which is the most excepted/supported way to do this?  Several of the severs
> are very old, 4+ years old.
> 
> Thanks for any help,
> 
> ---
> 
> Chris Edwards

You need to handle two things, user identification and user
authentication.  OpenLDAP (actually nss_ldap) will do the id part and
kerberos will do the authentication part.  Unfortunately my AD related
links for this are at work and I'm at home today.

tom

-- 
| tmclaugh at sdf.lonestar.org                 tmclaugh at FreeBSD.org |
| FreeBSD                                       http://www.FreeBSD.org |




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1214929824.3394.6.camel>