You can use samba to join an AD. (net ads join).
This will let you use AD kerberos tickets when accessing a samba share.

>From there, you either need a way to map usernames to posix UID.

Personally I like to maintain a completely separate ldap database for
the `getent passwd` and `getent group` databases, but you can just as
easily hand maintain them in /etc/ or use samba's algorithmic UID
mapping.

-s

On Tue, Dec 15, 2009 at 7:49 AM, Scott Ehrlich <[email protected]> wrote:
> I have a client with a handful of USB drives connected to a CentOS
> box.   I am charged with binding the USB drives together into a single
> LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap
> storage in a single mount point).
>
> The next fun piece is how to incorporate that storage space into an
> existing Active Directory structure to apply AD acls for limited
> access.
>
> I'd rather not use Samba, as that is its own infrastructure and
> maintains its own credentials database.
>
> What are my best options?
>
> Thanks.
>
> Scott
>
> _______________________________________________
> bblisa mailing list
> [email protected]
> http://www.bblisa.org/mailman/listinfo/bblisa
>

_______________________________________________
bblisa mailing list
[email protected]
http://www.bblisa.org/mailman/listinfo/bblisa

Reply via email to