<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 11 (filtered medium)"> <o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PlaceType"/> <o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PlaceName"/> <o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="place" downloadurl="http://www.5iantlavalamp.com/"/>  <style>  </style> </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> John,<o:p></o:p> <o:p> </o:p> I've been using single source authentication via Active Directory. There has been developments with Winbind (I think it is included with the most recent versions), that you can enable a module and it will map the AD SIDS to UNIX ids consistently, so you'll have the same UID number across multiple systems. Now I do it via LDAP and Microsoft Services for Unix. It is a little more to configure per user, however I can specify different home paths for users.. .ie: I keep students in /home/students and faculty in /home/faculty. You can't do that with Winbind, but then again, Winbind is a lot less work. I've just finally got LDAP failover working with my DCs.<o:p></o:p> <o:p> </o:p> Henry Burroughs<o:p></o:p> Technology Director<o:p></o:p> <st1:place w:st="on"><st1:PlaceName w:st="on">Hilton</st1:PlaceName> <st1:PlaceName w:st="on">Head</st1:PlaceName> <st1:PlaceType w:st="on">Preparatory School</st1:PlaceType></st1:place><o:p></o:p> www.hhprep.org<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Date: Tue, 30 Jan 2007 14:40:29 -0800<o:p></o:p> From: "john " <lists.john@gmail.com><o:p></o:p> Subject: multi-server/single source authenticaton was Re: [K12OSN]<o:p></o:p> Networking a new school for K12LTSP?<o:p></o:p> To: "Support list for open source software in schools."<o:p></o:p> <k12osn@redhat.com><o:p></o:p> Message-ID:<o:p></o:p> <2be970b50701301440t630ed022w945070e20f3ce10d@mail.gmail.com><o:p></o:p> Content-Type: text/plain; charset="iso-8859-1"<o:p></o:p> <o:p> </o:p> This has been an interesting thread. It makes me want to raise my own<o:p></o:p> question.<o:p></o:p> <o:p> </o:p> Is it possible to do multi-server/single source authenticaton using Active<o:p></o:p> Directory rather than LDAP? Right now, we're not able to drop active<o:p></o:p> directory for students, but will probably need to add servers as our LTSP<o:p></o:p> experiment moves forward. The sticking point has been the way winbind/samba<o:p></o:p> creates and maps unix passwords to windows passwords. Essentially each<o:p></o:p> installation of Linux that uses Active Directory for authenticaton ends up<o:p></o:p> with their own local user/pass db that makes centralized NFS homes<o:p></o:p> semi-impossible. Has anyone figured out how to scale Linux and AD?<o:p></o:p> <o:p> </o:p> John<o:p></o:p> <o:p> </o:p> </div> </body> </html>