ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Linux and LDAP

    Scheduled Pinned Locked Moved IT Discussion
    linuxldapkerberosnfs
    24 Posts 6 Posters 4.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender @scottalanmiller
      last edited by

      @scottalanmiller said:

      In a large environment of UNIX you would expect to see LDAP and Kerberos most of the time. There are other ways to tackle this like local users and tools to push those out that but that is generally too complex to do on scale.

      When I worked at West Teleservices 15+ years ago they managed all of their SCO boxes through local accounts and manged those through network based scripts...

      1 Reply Last reply Reply Quote 0
      • coliverC
        coliver
        last edited by

        I've always seen Kerberos+LDAP+NFS to do the "Active Directory" stuff with Linux. Even had a grad class that had us setup that environment.

        stacksofplatesS 1 Reply Last reply Reply Quote 1
        • stacksofplatesS
          stacksofplates @coliver
          last edited by

          @coliver said:

          I've always seen Kerberos+LDAP+NFS to do the "Active Directory" stuff with Linux. Even had a grad class that had us setup that environment.

          I had heard of Kerberos and Samba 4 as an AD replacement but I didn't know you could use it in that regard.

          coliverC scottalanmillerS 2 Replies Last reply Reply Quote 0
          • coliverC
            coliver @stacksofplates
            last edited by

            @johnhooks said:

            @coliver said:

            I've always seen Kerberos+LDAP+NFS to do the "Active Directory" stuff with Linux. Even had a grad class that had us setup that environment.

            I had heard of Kerberos and Samba 4 as an AD replacement but I didn't know you could use it in that regard.

            Right Samba4 is an AD drop-in replacement. Kerberos and LDAP are more designed for network logins for Linux and Unix systems.

            scottalanmillerS 1 Reply Last reply Reply Quote 1
            • scottalanmillerS
              scottalanmiller @stacksofplates
              last edited by

              @johnhooks said:

              I had heard of Kerberos and Samba 4 as an AD replacement but I didn't know you could use it in that regard.

              You would use Kerberos and LDAP but not Samba of any version. Samba does "Windows services", SMB protocol and AD. If you don't have Windows, you don't touch Samba. Samba is not the Kerberos or LDAP supplier, it's literally only for talking to Windows.

              1 Reply Last reply Reply Quote 1
              • scottalanmillerS
                scottalanmiller @coliver
                last edited by

                @coliver said:

                @johnhooks said:

                @coliver said:

                I've always seen Kerberos+LDAP+NFS to do the "Active Directory" stuff with Linux. Even had a grad class that had us setup that environment.

                I had heard of Kerberos and Samba 4 as an AD replacement but I didn't know you could use it in that regard.

                Right Samba4 is an AD drop-in replacement. Kerberos and LDAP are more designed for network logins for Linux and Unix systems.

                Samba4 takes Kerberos and LDAP and sets them up in an AD way. AD is just specialized Kerberos and LDAP packaged together and ready to go.

                coliverC 1 Reply Last reply Reply Quote 1
                • coliverC
                  coliver @scottalanmiller
                  last edited by

                  @scottalanmiller said:

                  @coliver said:

                  @johnhooks said:

                  @coliver said:

                  I've always seen Kerberos+LDAP+NFS to do the "Active Directory" stuff with Linux. Even had a grad class that had us setup that environment.

                  I had heard of Kerberos and Samba 4 as an AD replacement but I didn't know you could use it in that regard.

                  Right Samba4 is an AD drop-in replacement. Kerberos and LDAP are more designed for network logins for Linux and Unix systems.

                  Samba4 takes Kerberos and LDAP and sets them up in an AD way. AD is just specialized Kerberos and LDAP packaged together and ready to go.

                  Yep, hence the "drop-in" replacement for AD.

                  scottalanmillerS 1 Reply Last reply Reply Quote 1
                  • scottalanmillerS
                    scottalanmiller @coliver
                    last edited by

                    @coliver said:

                    Yep, hence the "drop-in" replacement for AD.

                    Just want to make sure that everyone reading understands that Samba4 does one very specific version and setup for Kerberos and LDAP while on UNIX there are many options for how to do that both in setup as well as in products. Although I'd guess 99% of UNIX people just use OpenLDAP.

                    dafyreD 1 Reply Last reply Reply Quote 2
                    • dafyreD
                      dafyre @scottalanmiller
                      last edited by

                      @scottalanmiller said:

                      Although I'd guess 99% of UNIX people just use OpenLDAP.

                      If you are in a 100% *nix environment, then that would make sense... No need for Samba4/Active Directory unless you are primarily a Windows shop.

                      1 Reply Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller
                        last edited by

                        Windows or Mac. Even though Mac is 100% UNIX, it has so much built in SMB and AD support, you would use it for that potentially too.

                        1 Reply Last reply Reply Quote 1
                        • Reid CooperR
                          Reid Cooper
                          last edited by

                          OpenLDAP is what the average Linux shop is going to turn to when looking to implement an "AD like" authentication mechanism when no Windows is involved.

                          1 Reply Last reply Reply Quote 0
                          • 1
                          • 2
                          • 2 / 2
                          • First post
                            Last post