01-10-2018
Quote:
Originally Posted by
psychocandy
But they also have Windows - but its likely they will want to keep windows separate.
What Windoze calls "Active Directory" is in fact a (very stripped-down*) ) LDAP domain with Kerberos V authentication. You
can use a regular LDAP domain to feed info to the Windoze domain because it is essentially the same.
I hope this helps.
bakunin
___________
*) What i mean by that is that, for instance, a usual attribute for a user record is "login shell", which usually points to
/usr/bin/ksh,
/usr/bin/bash or something alike. In the original "Active Directory" this entry misses and because you cannot change the structure in Windoze you cannot use the Active directory information to authenticate UNIX/Linux users. You will (and should) do it the other way round therefore.
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Hello all,
I'm not sure if this is the right forum, but I would like to know if Redhat running NIS ( not NIS +) would have conflict with Solaris running NIS+. Currently I am running NIS+ on Solaris but will be adding RedHat to the network. I seem to be unable to find and information regarding... (2 Replies)
Discussion started by: larry
2 Replies
2. UNIX for Dummies Questions & Answers
Hello all,
I am wondering if anyone had success with installing a redhat linux (PC box) on a Solaris NIS+ network. I have gotten information on how to do this but have been unsuccessful. The information that I have gotten is a little out dated and is not 100%. ... (0 Replies)
Discussion started by: larry
0 Replies
3. UNIX for Advanced & Expert Users
I am running a DNS/NIS server on and older 2.6 system. I would like to move it to a newer system running Sol9. I have not found a good HOWTO and was looking for some advice.
Thanks in advance.
Dave (4 Replies)
Discussion started by: dlalonde
4 Replies
4. Solaris
Hi all,
Recently i have implemented NIS functionality in solaris 10 and i have created server and client with user in server side by giving
useradd -d /export/home/user1 -m -s /bin/sh user1
after that I went to /var/yp dir and give /usr/ccs/bin/make so that it will refelect to client... (2 Replies)
Discussion started by: esungoe
2 Replies
5. Solaris
We set-up master/slave servers for NIS on Solaris10 Sparc. We are trying to synchronize them in such a way that if one server is down then other server would pick-up and also do load balancing. We are stuck on this part. Do you have any documentation or point to the documentation where we get some... (1 Reply)
Discussion started by: anandp14
1 Replies
6. Solaris
Hello
How can I check to see when nis server is starting? I look at /etc/rc2.d/ but I don't see it in there.
Every time we have power outage problem. I have to start autof service manual. So I think it might have to do with nis server services. (1 Reply)
Discussion started by: congngo
1 Replies
7. Solaris
Hi,
I have a Solaris 10 machine and trying to connect it to a Linux NIS Server. Up till now I have set up NIS so that it does find the NIS server and gets the user list.
Automounter also mounts some directories from an NFS server.
However, I can't get it to map the shadow passwords (they... (4 Replies)
Discussion started by: dop
4 Replies
8. UNIX for Advanced & Expert Users
Hi,
I hope somebody can help me. I wand to Move my NIS server on Solaris 10
(there are 2 Slaves on Linux) to CentOS7.
Do you have any procedures or experience to do this?
Thanking in anticipation! (2 Replies)
Discussion started by: Penguin99
2 Replies
9. Solaris
Sys admin has provided me username and password and advised that solaris uses nis (and then I've been given hostnames).
I've downloaded putty but it gives me authentication failure. Nothing special I have to do if its NIS authentication? (1 Reply)
Discussion started by: psychocandy
1 Replies
10. Solaris
ypcat passwd | grep "user"
- shows the user
userdel "user"
says "user does not exist"
What am I doing wrong? (1 Reply)
Discussion started by: psychocandy
1 Replies
LEARN ABOUT OPENSOLARIS
ad
ad(5) Standards, Environments, and Macros ad(5)
NAME
ad - Active Directory as a naming repository
DESCRIPTION
Solaris clients can obtain naming information from Active Directory (AD) servers.
The Solaris system must first join an AD domain and then add the ad keyword to the appropriate entries in the nsswitch.conf(4) file. The
Solaris system joins the AD domain by using the kclient(1M) utility. The AD name service only supports the naming databases for passwd and
group.
Windows users are not able to log in. The user_attr(4) database has no entries for Windows users, and the passwd(1) command does not sup-
port the synchronization of user passwords with AD.
The Solaris AD client uses auto-discovery techniques to find AD directory servers, such as domain controllers and global catalog servers.
The client also uses the LDAP v3 protocol to access naming information from AD servers. The AD server schema requires no modification
because the AD client works with native AD schema. The Solaris AD client uses the idmap(1M) service to map between Windows security identi-
fiers (SIDs) and Solaris user identifiers (UIDs) and group identifiers (GIDs). User names and group names are taken from the sAMAccountName
attribute of the AD user and group objects and then tagged with the domain where the objects reside. The domain name is separated from the
user name or group name by the @ character.
The client uses the SASL/GSSAPI/KRB5 security model. The kclient utility is used to join the client to AD. During the join operation,
kclient configures Kerberos v5 on the client. See kclient(1M).
FILES
/etc/nsswitch.conf Configuration file for the name-service switch.
/etc/nsswitch.ad Sample configuration file for the name-service switch configured with ad, dns and files.
/usr/lib/nss_ad.so.1 Name service switch module for AD.
SEE ALSO
passwd(1), svcs(1), idmap(1M), idmapd(1M), kclient(1M), svcadm(1M), svccfg(1M), svccfg(1M), nsswitch.conf(4), user_attr(4), smf(5)
SunOS 5.11 22 Oct 2008 ad(5)