Hi, Also if its straight into AD Im not aware you can use AD to control a Linux authentication and authorisation adequately without something like likewise or centrify. I think the best yiu can do is one group?
regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ________________________________________ From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of David Juran [da...@juran.se] Sent: Thursday, 30 August 2012 7:30 p.m. To: KodaK Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Desperate help requested. On lör, 2012-08-25 at 23:05 -0500, KodaK wrote: > I've just been informed by my boss's boss's boss that, and I quote > from his ridiculous email: > > "we cannot use anything other than MS AD for authentication" > > I've spent months of time and much effort rolling out IPA, > consolidating authentication across our Linux and AIX machines. To > paraphrase Babbage: I am not able rightly to apprehend the kind of > confusion of ideas that could provoke such a statement. > > Regardless, I need some help. I need some help with comparisons > between FreeIPA and AD, and the problems and issues one might > encounter when trying to authenticate Unix machines against AD. > Anything that can show IPA being superior to AD for *nix > authentication. Anything at all. We have a similar number of AIX and > Linux servers. We have a week before we have a meeting to discuss > this, and I'd like to be armed to the teeth, if at all possible. Apart from what everyone else already pointed out, I believe that if you register the Linux host in the AD, you'll need to purchase a CAL for it... /David _______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
