Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 283
  • Last Modified:

Linux LDAP Win2k

Has anyone got this to work? Use Linux LDAP to auth win2k instead of AD. I've got my Linux servers running DHCP,
DNS, file and print services I would like to add LDAP
to centralize user management. I have 3 NT4 servers
now running Exchange, SQL and some other things and a Novell 4.11. These boxes will be moving to win2K and Netware 6 and I would like to get things ready by setting up LDAP.
I have found info on auth'ing linux to AD but not the other way around. Is it possible? and how would Novell take to this too?
0
jscart
Asked:
jscart
  • 4
  • 4
  • 3
  • +2
1 Solution
 
mbarbosCommented:
I've got no ideea about Netware, but:

1. you can use a linux (samba) PDC & BDC (as long as you don't try to mix linux/unix DC with M$ DC)
2. You can use a centralized auth service for samba, ldap seems to be one of them. I'm using NIS+ and this setting succesfully replaces a NT PDC. (Ok, a NT PDC is behaving like a NT PDC, but that should be Ok for most applications)

There was a netware servers software for linux (but I can't tell you much more than that), the netware client for linux works quite well (I presume, but see the first line :)
0
 
heskyttbergCommented:
Hi!

You can use the samba pdc and ldap connection, but you loose som advatages of AD in a Windows only environment,like profiles, centralised security and such.

Also if you planning on upgrading exchange to 2000 or newer, it requires AD, it will not run without AD.

And you should not mix AD and samba PDC.

Regards
/Hans - Erik Skyttberg
0
 
mbarbosCommented:
What do you mean by "you loose som advatages of AD in a Windows only environment,like profiles, centralised security and such" ?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
heskyttbergCommented:
Hi!

Well if you use AD in windows and connect w2k,xp clients in AD you can tell exactly what user can and cannot do.
Theese rights propagate down to machines and servers added to the domain, this isn't possibly in that way using PDC/BDC environment.

So in AD is a user needs access to a certain thing on a member server this can be done by adding it in AD.

Not quite this easy in PDC/BDC where you need to create GLOBAL GROUP, local GROUP and set rights to thoose then put user into theese and stuff.

But the biggest obstacle when using exchange is the fact that Exchange 2000 requires AD.

Regards
/Hans - Erik Skyttberg
0
 
mbarbosCommented:
Ok, you're right about that, you just get a plain old PDC
Somehow I got the impression that your comment said that you loose those because of samba, not because it's an NT PDC.
0
 
jscartAuthor Commented:
I don't want to use PDC I would just like to use linux to host the AD/LDAP data and have users/servers query the linux box for AD/LDAP info. Is this possible? If not then can linux act as a AD backup/replica?
0
 
heskyttbergCommented:
Hi!

No, that is not possible on both counts.

AD and LDAP is two diffrent implementations.

LDAP is centralized user/passwod only.

AS i soo much more, and there is no AD software for Linux yet and I strongly doubt there will ever be one.

Regards
/Hans - Erik Skyttberg
0
 
heskyttbergCommented:
typo last AS = AD, :)

/Hans - Erik Skyttberg
0
 
jscartAuthor Commented:
well that sux, since there is no real answer I'll just leave the question open for a while see if some come up down the road.

Thanks all
0
 
mbarbosCommented:
There is samba 3.0 (alpha) which is supposed to do something like what you want. But I'm afraid you'll be a beta tester in this case (sorry, I mean alpha tester:)
0
 
CleanupPingCommented:
jscart:
This old question needs to be finalized -- accept an answer, split points, or get a refund.  For information on your options, please click here-> http:/help/closing.jsp#1 
EXPERTS:
Post your closing recommendations!  No comment means you don't care.
0
 
jscartAuthor Commented:
Please delete the question as it looks like there is no viable solution.
0
 
moduloCommented:
PAQed with points refunded (400)

modulo
Community Support Moderator
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 4
  • 4
  • 3
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now