Talwar, Puneet (NIH/NIAID) wrote: >Well I would like to know if can setup Fedora Dir Services on my RHEL v4 to >authenticate my users against the AD env. to implement single sign on (SSO)? > > You can sync your AD users and their passwords with FDS. This means that using the same username and password, a user can authenticate against either AD or FDS (or applications the users themselves use may delegate authentication to either LDAP service). Is that what you're looking to do ? It's possible that you want to proxy LDAP BIND operations submitted to FDS back to your AD service. Not sure if that makes sense because you could simply have the applications use AD directly. Anyway, it might be possible to use kerberos to delegate auth from FDS to AD but I don't think anyone has tried it (partly because it doesn't seem too useful).