Re: [389-users] Password lookup to AD

[Nathan Kinder <nkinder@xxxxxxxxxx>]

Title: Password lookup to AD

On 07/13/2009 10:13 AM, Prashanth Sundaram wrote:

Hi,

Is it possible to have Fedora DS and have the password lookup redirected to Active Directory? Some kind of proxy lookup. Take the case of Mac OS X server and clients, they have Open Directory and the password manager can authenticate against the Active Directory.

Is it possible to have FDS without the password?

See the PAM Pass-through plug-in:

http://directory.fedoraproject.org/wiki/Howto:PAM_Pass_Through

So I would like to know, is it possible to achieve the same for FDS using Samba, Winbind or NSS?? Is it possible that the FDS has all the user permissions  and special groups but the authentication is turned to AD. I know the passwords are hashed by Kerberos and hope we can achieve this with some effort.

A useful post by Microsoft
http://technet.microsoft.com/en-us/magazine/2008.12.linux.aspx?pr=blog

Thanks,
Prashanth

--
389 users mailing list
389-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
  

--
389 users mailing list
389-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users