Does anyone have a good link to Option 1? I've never used SFU before and am not a NIS guru by any standards. David you beat me to this post! I have the same concerns.
Dave Kinnamon -----Original Message----- From: W2K List [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 14, 2003 10:37 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Authenticating Solaris against Active Directory David, Reference item 4. I don't think you need to build a separate kerberos realm. Microsoft has a white paper titled "Windows 2000 Kerberos Interoperability" which might be of use. Although, since you already have NIS running, I would look into option 1. Dennis > > -----Original Message----- > From: Fugleberg, David A [mailto:[EMAIL PROTECTED] > Sent: Wednesday, May 14, 2003 11:30 AM > To: [EMAIL PROTECTED] > > One of our departments has a number of Solaris 8 workstations > in a NIS domain. I've been asked to find a way to > authenticate them against AD. Here are the options I've seen so far: > 1. Use MS Services For Unix as a NIS master for the NIS domain > 2. Extend the AD schema with SFU or AD4UNIX and use PAM and > NSS modules from PADL > 3. Use the SCO Authentication product (looks like a > commercialized version of #2) > 4. Build a MIT Kerberos realm for the UNIX boxes and make it > trust the AD domain > > The end goal is that the Solaris users continue to work > exactly as they do today, except the userID/password they use > is the one managed in AD. Obviously, this should be done > with as little money as possible (we're an airline, after all). > > Anybody have experience with one or more of these options ? > Can you point me to any good documentation on any of them ? > > Dave Fugleberg > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
