• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 553
  • Last Modified:

Authenticating Unix users with Active Directory

Hello,

I have a windows domain that I want to use as the centralized logon authenticator for both my windows AD domain and our unix users.

Currently our unix users have their own ldap, but I need to get them on my AD.  

I installed NIS on my windows 2003 domain controllers, created the SG (Global Security Group) group for my Linux users and created a test user account.  

I added that test user to the correct NIS domain, used their correct UID, and made sure their primary group was that SG group.  

They can authenticate with my AD just fine; HOWEVER, when they try and change their password from the UNIX side they get an error that the authentication token failed.  I can reset it from the AD side, but need them to be able to reset their own passwords.

What am I missing here?

Thanks
0
lbtoadmin
Asked:
lbtoadmin
1 Solution
 
lbtoadminAuthor Commented:
I forgot to mention my DC's are 2003 Ent Server R2.
0
 
Fabio MarzoccaFreelancerCommented:
Why don't you use Likewise?
http://www.likewise.com/
0
 
group0Commented:
You'll need a script that authenticates using their existing credentials, and then deletes the old password while adding the new.  An example of how to do this with Perl can be found here: http://search.cpan.org/~gbarr/perl-ldap/lib/Net/LDAP/FAQ.pod#..._in_MS_Active_Directory_? however the script needs to be fleshed out a bit to accept arguments, or stop and wait for input so they don't need to manually edit the script every single time to specify their username, old password and new password.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now