:: Re: [DNG] Implementing directory se…
Top Page
Delete this message
Reply to this message
Author: Rowland Penny
Date:  
To: dng@lists.dyne.org
Subject: Re: [DNG] Implementing directory services/Kerberos
On Thu, 8 Nov 2018 12:04:53 +1100
wirelessduck@??? wrote:

> On Mon, 3 Sep 2018 at 17:37, Rowland Penny <rpenny@???> wrote:
> >
> > On Mon, 3 Sep 2018 10:34:50 +1000
> > wirelessduck@??? wrote:
> >
> > > I’m looking to setup some sort of directory services/network
> > > authentication for users on a small corporate network running
> > > Devuan Ascii. Is it recommended to use Kerberos+LDAP?
> > >
> > > Are there any good tutorials out there for setting this up and
> > > explaining how it works? Where do people learn this stuff if they
> > > have no one else to learn from on the job?
> > >
> > > I have a small amount of experience using Active Directory on a
> > > windows network and connecting some Linux servers to that with
> > > winbind but no direct experience in managing LDAP or Kerberos
> > > directly.
> > >
> > > I have also taken a look at FusionDirectory and it looks
> > > relatively simple to use. Does anyone have experience/advice with
> > > this or other management interfaces? Implementing plain OpenLDAP
> > > and Kerberos directly looked incredibly complex and confusing
> > > when I attempted to read some of their documentation a while back.
> > >
> > > Thanks
> > >
> > > —Tom
> > > _______________________________________________
> > > Dng mailing list
> > > Dng@???
> > > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
> >
> > Seeing as you have some experience with Active Directory, why not
> > use Active Directory, but not from Windows, from Samba.
> >
> > Try having a look here:
> >
> > https://wiki.samba.org/index.php/Main_Page
> >
> > Rowland
>
> As I have no experience administering either AD or OpenLDAP, and this
> network will be entirely Linux machines, I have decided to go with
> OpenLDAP. Thanks for the suggestion though, and I would most likely
> use Samba if it was a Linux+Windows network.
>
> --Tom


I don't have any windows machines either, but it is your choice, just
don't try adding Samba into the mix.

Rowland