RE: [ActiveDir] UNIX intergation into W2K3 Domain

[joe]

To tie back in, if you have a single *nix platform that you keep pretty standard for patches and such then your chances are better at keeping up with making it work. The more platforms or versions of a platform (or some combination) the stronger you need to be looking at a packaged product. You could seriously have a full time job trying to keep up with that stuff and working out the kinks every time there is an update if you have quite a few platforms/revs you have to cover.   -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm      From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Tuesday, January 31, 2006 1:42 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] UNIX intergation into W2K3 Domain I have to agree. It seems that once you have finally dorked around for what seems forever and have it working, something (whether it be a samba vulnerability or some other *nix change; especially in Solaris) breaks it and you have to dork around again. Vintela honestly took me less than 10 minutes to get it working on the first Solaris machine (including reading the instructions) and probably a minute for every machine thereafter. I have used SFU and NIS and it was pretty easy too, but does have a limited life, and is pretty insecure (no less than all those pure LDAP implementations of authentication to AD though). Now if you are talking something like RHEL 4 it doesn’t take much to get it working at all, so maybe another solution would be to evaluate why you use Solaris over another *nix platform.   At least get a price quote and compare it to 40 hours x 2 x your hourly rate, before going down the path of trying it yourself. Could take less than 80 hours or more, but I would say a good baseline for Solaris. The times 2 comes from the fact that for every hour you are working on it, you take an hour away from something else that needs done.   On a side note, I did learn a lot when messing around with trying it myself.   I apologize for my scattered way of thinking and composing a message.                               From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, January 30, 2006 5:34 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] UNIX intergation into W2K3 Domain   I would just say Centrify and Vintela unless you want to spend a good amount of time dorking around with it.     -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm        From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, January 30, 2006 4:51 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] UNIX intergation into W2K3 Domain Not sure what you mean by redundant fsmo but... As for integration:   opensource: samba was supposed to come out with a v4 of their product that looked promising. Centrify and Vintella would be more of what I'd look for however.  Much smoother integration. PAM modules could be used if you really wanted to, although it wouldn't be my first choice. NFS?  That doesn't solve your issue of single credentials.   Al   On 1/30/06, Simon Bembridge <[EMAIL PROTECTED]> wrote: I am  in the process of establishing a Single forest/domain, with 2xDC both GC FSMO split between both, at another site there will have another 2XDC (Redundant FSMO) All DC will host DNS, DHCP service and WINS for (Exchange 2003 netbious legacy) is this still an issue?? Windows based FS There is also a requirement for a couple of Solaris 8.x and Linux (Redhat ES 3.x). I require a single Windows sign on for the UNIX boxes,Can anybody give me advice also as to MS NFS and additional a PAM solution   Best Regards,   Simon UK