Re: Kerberos and Winbind both needed for Active Directory??

[alex at milivojevic.org (Aleksandar Milivojevic)]

Quoting Les Mikesell <lesmikesell@xxxxxxxxx>:

> Is there a way to configure multiple machines to use AD
> authentication and get the same uids so NFS mounts will
> work across all of them?

Instead of using winbind, you might look onto AD as combination of 
Kerberos and
LDAP.  You would configure Kerberos for authentication, and then use LDAP to
fetch user information (UID, GID, and so on).  You'd need AD 2k3, so that you
can add posixAccount etc object classes.  It should also be possible with AD
2k, but it is a bit more work to get it going.  Microsoft has an excellent
document on using AD with Unix.  Go to Microsoft web site and search for
something called "Windows Security and Directory Services for UNIX".  It's a
downloadable PDF document, something like 392 pages long.


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.