Greg,
The latest release of Windows AD (ADR2) integrates a newer version of SFU into the
AD schema. We have tested it very successfully using our CentOS boxes to authenticate
authorize access to our machines, using kerberos and LDAP.
We tried the winbind/smb approach, and the way it handles UIDs and GIDs is less than
desireable in our case. It might work for small offices/networks with 50 users or so,
but for us, in the case of spreading it campuswide to 1000s of users, it would never
do. Also, the degree of UID/GID management is less than stellar since they are enumerated
as people log on, and if the machine housing the UID/GID database crashes or you lose the
database, getting the exact same mappings upon rebuild may not work - even with backups.
Ian
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
