Posts

Showing posts with the label ldap

Enable CentOS 5.8 GNU / Linux Authentication on Windows Domain

Image
In case you should ever be finding yourself having to configure your CentOS 5.8 GNU/Linux machines to allow active directoy windows users to login to them, this post will help. While there are a few ways to set this up, i.e., likewise-open (see beyondtrust.com), centrify (centrify.com), the built-in System, Authentication graphical controls in CentOS, etc., the method in this post focuses on touching just a few config files to enable active directory  authentication. K.I.S.S. is the way I like to roll. Using the authentication methods below assume that you have already enabled services for Unix on your active directory server and that the users that would be logging in to CentOS have their Unix tab (on ad user and computers) populated with values. The Authentication methods outlined here use LDAP and Kerberos. LDAP brings the UID/GID information (from the Unix tab in ad) for the user, and Kerberos provides for username/password authentication piece. With the default insta...

Fedora 6 LDAP / Kerberos Auth to Active Directory on Windows Srvr 2003 R2

Fedora 6 LDAP / Kerberos Auth to Active Directory on Windows Srvr 2003 R2 Tested by Shannon VanWagner Problem Connecting Fedora 6 to a Windows Srvr 2003 R2 DC for auth and uid/gid sync with AD. Solution Configure Fedora 6 to use LDAP, Samba, and Kerberos to auth with Windows Srvr 2003 R2 DC with Identity Mgmt for UNIX. Here's How: 1.) On Windows Server 2003 R2 DC - enable "Identity Management for UNIX" via Add/Rmv Programs > Add Win Components > AD Services > Identity Mgmt for UNIX (reboot req'd). This will add the UNIX Properties tab to user accounts in AD that will allow you to control the UID, primary group GID, NIS Server setting, home dir location, and user shell setting. 2.) Create a user in AD to use for authenticating via LDAP from the Fedora 6 client. Make this user a primary member of Domain Guests for security. 3.) For any Win user that logs into the Fedora 6 machine, modify the "UNIX Attributes" tab for the user's account in AD. ...