Also if its straight into AD Im not aware you can use AD to control a Linux
authentication and authorisation adequately without something like likewise or
centrify. I think the best yiu can do is one group?
Technical Specialist - Linux RHCE
Victoria University, Wellington, NZ
0064 4 463 6272
From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on
behalf of David Juran [da...@juran.se]
Sent: Thursday, 30 August 2012 7:30 p.m.
Subject: Re: [Freeipa-users] Desperate help requested.
On lör, 2012-08-25 at 23:05 -0500, KodaK wrote:
> I've just been informed by my boss's boss's boss that, and I quote
> from his ridiculous email:
> "we cannot use anything other than MS AD for authentication"
> I've spent months of time and much effort rolling out IPA,
> consolidating authentication across our Linux and AIX machines. To
> paraphrase Babbage: I am not able rightly to apprehend the kind of
> confusion of ideas that could provoke such a statement.
> Regardless, I need some help. I need some help with comparisons
> between FreeIPA and AD, and the problems and issues one might
> encounter when trying to authenticate Unix machines against AD.
> Anything that can show IPA being superior to AD for *nix
> authentication. Anything at all. We have a similar number of AIX and
> Linux servers. We have a week before we have a meeting to discuss
> this, and I'd like to be armed to the teeth, if at all possible.
Apart from what everyone else already pointed out, I believe that if you
register the Linux host in the AD, you'll need to purchase a CAL for
Freeipa-users mailing list