Also if its straight into AD Im not aware you can use AD to control a Linux 
authentication and authorisation adequately without something like likewise or 
centrify.  I think the best yiu can do is one group?


Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on 
behalf of David Juran [da...@juran.se]
Sent: Thursday, 30 August 2012 7:30 p.m.
To: KodaK
Cc: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] Desperate help requested.

On lör, 2012-08-25 at 23:05 -0500, KodaK wrote:
> I've just been informed by my boss's boss's boss that, and I quote
> from his ridiculous email:
> "we cannot use anything other than MS AD for authentication"
> I've spent months of time and much effort rolling out IPA,
> consolidating authentication across our Linux and AIX machines.  To
> paraphrase Babbage: I am not able rightly to apprehend the kind of
> confusion of ideas that could provoke such a statement.
> Regardless, I need some help.  I need some help with comparisons
> between FreeIPA and AD, and the problems and issues one might
> encounter when trying to authenticate Unix machines against AD.
> Anything that can show IPA being superior to AD for *nix
> authentication.  Anything at all.  We have a similar number of AIX and
> Linux servers.  We have a week before we have a meeting to discuss
> this, and I'd like to be armed to the teeth, if at all possible.

Apart from what everyone else already pointed out, I believe that if you
register the Linux host in the AD, you'll need to purchase a CAL for


Freeipa-users mailing list

Reply via email to