[TriLUG] ldap authentication from Active directory or NTDS

[Magnus Hedemark]

On Tue, 13 Jan 2004, Roy Vestal wrote:

> On Thu, 2004-01-08 at 06:23, Magnus wrote:
[snip]
> Gonna have to disagree with you here Chris. 

Who?

> Once we were able to get the
> right compile options, I was able to join to the AD and it works
> perfectly authenticatin against the AD, Solaris, RedHat Linx 7.3 and 9.
> "net ads join" worked great. Didn't have to spend the <$100.  :)

That might be okay for standalone workstations, but how do you get a 
consistent UID/GID from host to host?  That is not, by default, kept in 
AD.  The schema must be extended to provide this, or you must provide it 
from somewhere else.  Otherwise stuff like NFS home directories doesn't 
work.