|
Yeah I was looking this over the other
day...
Has anyone been using the VAS product that is described. I
would be curious to hear RW experiences.
Our UNIX Kerberos integration folks have been fighting with
multirealm issues and cert expiration with chatter about possibly having us
extend the expiration on certs where I would be more inclined to shorten the
expiration for security reasons [1]. MS really did some good things with
kerberos in these areas and it seems MIT isn't really looking at making their
version any more friendly to give similar functionality (auto renew, realistic
cross-realm) as the MS stuff has built in.
joe
[1] Like for having tickets get reverified more often in
case of disabled accounts, etc.
-------------
http://www.joeware.net (download joeware)
http://www.cafeshops.com/joewarenet (wear joeware)
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, March 03, 2004 3:29 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Integrating UNIX accounts with AD via Kerberos & LDAP Incredible timing Jackson. Thanks for the
guide!
Al From: Jackson Shaw [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 03, 2004 3:13 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Integrating UNIX accounts with AD via Kerberos & LDAP I thought the
list might be interested in the following: The Microsoft
Solutions for UNIX Team has released some new guidance that will help you get
integrate UNIX accounts with Active Directory. This is a new solution that
covers building security and directory solutions for UNIX using the
Overview This guide
provides prescriptive guidance to enable Microsoft® Windows Server(tm) 2003 to
be used for authentication and as an identity and authorization data store
within heterogeneous Microsoft Windows® and UNIX environments. The guidance
covers evaluating, planning, building, and deploying a security and directory
infrastructure based on Cheers, |
