[Fedora-directory-users] Fedora Dir services working with AD env.

[David Boreham]

Talwar, Puneet (NIH/NIAID) wrote:

>Well I would like to know if can setup Fedora Dir Services on my RHEL v4 to
>authenticate my users against the AD env. to implement single sign on (SSO)?
>  
>
You can sync your AD users and their passwords with FDS.
This means that using the same username and password, a
user can authenticate against either AD or FDS (or applications
the users themselves use may delegate authentication to either
LDAP service).

Is that what you're looking to do ?

It's possible that you want to proxy LDAP BIND operations
submitted to FDS back to your AD service. Not sure if that
makes sense because you could simply have the applications
use AD directly. Anyway, it might be possible to use
kerberos to delegate auth from FDS to AD but I don't
think anyone has tried it (partly because it doesn't seem
too useful).