Re: [Freeipa-users] Authenticating windows users

[grace rante thompson]

sorry, I guess I should have been more clear that we needed more than just
Kerberos. Somebody suggested pGina so I'll give it a shot.

thanks


On Thu, Mar 23, 2017 at 11:52 AM, Jason B. Nance  wrote:

> Thanks Jason, but those documents need AD as the primary authenticator.
> This is not the case for us.
>
> I think you need to read them a bit closer.  Very first line of first link
> says:
>
> "This article describes direct integration between FreeIPA and Windows
> machine, i.e. without involving Active Directory server."
>
>
>
> On Thu, Mar 23, 2017 at 11:46 AM, Jason B. Nance 
> wrote:
>
>> We are primarily linux/osx shop and we currently have FreeIPA/IDM (ver
>> 4.2) as our master. I will need to add a handful of windows machines and
>> been trying to figure out how to authenticate our windows users with
>> FreeIPA/IDM. Is this even possible? I know Global Catalogs may not happen
>> anytime soon (sad face).  I'm open to -all- ideas, even if it is a paid
>> solution (not sure if centrify and the likes can sync up to FreeIPA/IDM).
>>
>> I would start here:
>>
>> https://www.freeipa.org/page/Windows_authentication_against_FreeIPA
>>
>> https://www.freeipa.org/page/Implementing_FreeIPA_in_a_
>> mixed_Environment_(Windows/Linux)_-_Step_by_step
>>
>>
>
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Authenticating windows users

[Standa Laznicka]

I changed the text emphasis so that this is more clear in the future, 
thanks for noticing.


On 03/23/2017 07:52 PM, Jason B. Nance wrote:


Thanks Jason, but those documents need AD as the primary
authenticator. This is not the case for us.

I think you need to read them a bit closer.  Very first line of first 
link says:


"This article describes direct integration between FreeIPA and Windows 
machine, i.e. without involving Active Directory server."




On Thu, Mar 23, 2017 at 11:46 AM, Jason B. Nance
> wrote:

We are primarily linux/osx shop and we currently have
FreeIPA/IDM (ver 4.2) as our master. I will need to add a
handful of windows machines and been trying to figure out
how to authenticate our windows users with FreeIPA/IDM. Is
this even possible? I know Global Catalogs may not happen
anytime soon (sad face).  I'm open to -all- ideas, even if
it is a paid solution (not sure if centrify and the likes
can sync up to FreeIPA/IDM).

I would start here:

https://www.freeipa.org/page/Windows_authentication_against_FreeIPA


https://www.freeipa.org/page/Implementing_FreeIPA_in_a_mixed_Environment_(Windows/Linux)_-_Step_by_step








-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Authenticating windows users

[Jason B. Nance]

> Thanks Jason, but those documents need AD as the primary authenticator. This 
> is
> not the case for us.

I think you need to read them a bit closer. Very first line of first link says: 

"This article describes direct integration between FreeIPA and Windows machine, 
i.e. without involving Active Directory server." 

> On Thu, Mar 23, 2017 at 11:46 AM, Jason B. Nance < [ 
> mailto:ja...@tresgeek.net |
> ja...@tresgeek.net ] > wrote:

>>> We are primarily linux/osx shop and we currently have FreeIPA/IDM (ver 4.2) 
>>> as
>>> our master. I will need to add a handful of windows machines and been 
>>> trying to
>>> figure out how to authenticate our windows users with FreeIPA/IDM. Is this 
>>> even
>>> possible? I know Global Catalogs may not happen anytime soon (sad face). I'm
>>> open to -all- ideas, even if it is a paid solution (not sure if centrify and
>>> the likes can sync up to FreeIPA/IDM).

>> I would start here:

>> [ https://www.freeipa.org/page/Windows_authentication_against_FreeIPA |
>> https://www.freeipa.org/page/Windows_authentication_against_FreeIPA ]

>> [
>> https://www.freeipa.org/page/Implementing_FreeIPA_in_a_mixed_Environment_(Windows/Linux)_-_Step_by_step
>> |
>> https://www.freeipa.org/page/Implementing_FreeIPA_in_a_mixed_Environment_(Windows/Linux)_-_Step_by_step
>> ]
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Authenticating windows users

[Jason B. Nance]

> We are primarily linux/osx shop and we currently have FreeIPA/IDM (ver 4.2) as
> our master. I will need to add a handful of windows machines and been trying 
> to
> figure out how to authenticate our windows users with FreeIPA/IDM. Is this 
> even
> possible? I know Global Catalogs may not happen anytime soon (sad face). I'm
> open to -all- ideas, even if it is a paid solution (not sure if centrify and
> the likes can sync up to FreeIPA/IDM).

I would start here: 

https://www.freeipa.org/page/Windows_authentication_against_FreeIPA 

https://www.freeipa.org/page/Implementing_FreeIPA_in_a_mixed_Environment_(Windows/Linux)_-_Step_by_step
 
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Authenticating windows users

[grace rante thompson]

Thanks Jason, but those documents need AD as the primary authenticator.
This is not the case for us.

On Thu, Mar 23, 2017 at 11:46 AM, Jason B. Nance  wrote:

> We are primarily linux/osx shop and we currently have FreeIPA/IDM (ver
> 4.2) as our master. I will need to add a handful of windows machines and
> been trying to figure out how to authenticate our windows users with
> FreeIPA/IDM. Is this even possible? I know Global Catalogs may not happen
> anytime soon (sad face).  I'm open to -all- ideas, even if it is a paid
> solution (not sure if centrify and the likes can sync up to FreeIPA/IDM).
>
> I would start here:
>
> https://www.freeipa.org/page/Windows_authentication_against_FreeIPA
>
> https://www.freeipa.org/page/Implementing_FreeIPA_in_a_
> mixed_Environment_(Windows/Linux)_-_Step_by_step
>
>
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project