Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-11 Thread Rui Miguel Silva Seabra
Em 10-02-2010 00:43, Tom Bishop escreveu: I just need something for apache auth. I have winbind working just fine for the other stuff...Thanks One thing I use is ldaps auth, but it will always demand an auth dialog. Kerberos ticket support has the advantage than you may avoid that, but it has

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-11 Thread Tom Bishop
I was able to get ldap auth working fairly easily, although getting SSL to work took a little bit more effort due to trying to get the ca.cert from the SBS server On Thu, Feb 11, 2010 at 2:34 AM, Rui Miguel Silva Seabra r...@1407.orgwrote: Em 10-02-2010 00:43, Tom Bishop escreveu: I just

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-11 Thread Christoph Maser
Am Mittwoch, den 10.02.2010, 01:10 +0100 schrieb Jay Leafey: If you are using AD for JUST authentication and not user information, you can use the PAM Kerberos stuff. We've been using it for a couple of years from both CentOS/RHEL 4 and 5 systems with good results. It was actually pretty

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-10 Thread Dan Burkland
  -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of JohnS Sent: Wednesday, February 10, 2010 1:31 AM To: CentOS mailing list Subject: Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.? On Tue, 2010-02-09 at 14

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Tom Bishop
I looked over an most of which I have already done, the last piece that I am trying to address is how to do authentication with Apache against active directory, mod_auth_pam is one way but I have not had any luck getting it to compile with the latest ApacheThanks On Mon, Feb 8, 2010 at 6:49

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Pat and Lori Boyer
I've had decent luck with LDAP authentication for Apache. AD does not support anonymous LDAP searches so you have to have a user account that has the ability to search AD. Here's a modified sample config (.htaccess or httpd.conf) that includes security group membership checks. This would require

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Tom Bishop
This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would work, geez AD is just plain bad...lol, Thanks. On Tue, Feb 9, 2010 at 10:57 AM, Pat and Lori Boyer pbo...@gmail.comwrote:

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Joseph L. Casale
This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would work, geez AD is just plain bad...lol, Thanks. I guess you think insecure would be better? If I understand your need, you

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Tom Bishop
Point taken and I do understand, in reality I would rather have nothing to do with MS which is insecure from the start, ever try to firewall an SBS 2003 install, good luck, they recommend turning it off, go figurelol On Tue, Feb 9, 2010 at 12:08 PM, Joseph L. Casale jcas...@activenetwerx.com

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Craig White
On Tue, 2010-02-09 at 18:08 +, Joseph L. Casale wrote: This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would work, geez AD is just plain bad...lol, Thanks. I guess you

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Joseph L. Casale
seems to me that permitting an anonymous bind to LDAP is inherently more secure than requiring a user/password combination so I don't think that your explanation is exactly true. There are ways to create accounts just for this with reduced privileges. Research technet... In Microsoft's view, the

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Jay Leafey
If you are using AD for JUST authentication and not user information, you can use the PAM Kerberos stuff. We've been using it for a couple of years from both CentOS/RHEL 4 and 5 systems with good results. It was actually pretty easy to do (once we figured out which type of chicken bones to

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Tom Bishop
I just need something for apache auth. I have winbind working just fine for the other stuff...Thanks On 2/9/10, Jay Leafey jay.lea...@mindless.com wrote: If you are using AD for JUST authentication and not user information, you can use the PAM Kerberos stuff. We've been using it for a couple

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Craig White
On Tue, 2010-02-09 at 21:29 +, Joseph L. Casale wrote: seems to me that permitting an anonymous bind to LDAP is inherently more secure than requiring a user/password combination so I don't think that your explanation is exactly true. There are ways to create accounts just for this with

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread Stephen Carville
On Mon, Feb 8, 2010 at 8:18 AM, Tom Bishop bisho...@gmail.com wrote: Setting up a new backuppc for a small group of device and I am running centos 5.4 with winbind setup and working.  Everything is working and I would like the users to authenicate using their AD creds and was wondering what

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-09 Thread JohnS
On Tue, 2010-02-09 at 14:21 -0700, Craig White wrote: On Tue, 2010-02-09 at 18:08 +, Joseph L. Casale wrote: This looks like the way to go, I don't like the username /pass stored in plain text but maybe if I create a special group that doesn't really have any privileges this would

[CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-08 Thread Tom Bishop
Setting up a new backuppc for a small group of device and I am running centos 5.4 with winbind setup and working. Everything is working and I would like the users to authenicate using their AD creds and was wondering what folks are using to do that with apache 2.2 and centos 5.4. I know about

Re: [CentOS] Anyone using Active Driectory auth with Centos 5.4.....?

2010-02-08 Thread Arvind P R
I had written a blog quite some time back on this. There might be some glitches in it, but will give you some clue. The blog is blog.Palalinha.Com i am sitting at the airport with my mobile so cant find you the correct thread in the blog. Let me know if it helps. On 2/8/10, Tom Bishop