<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hello.<br>
I'm wondering if anyone has used FreeIPA with Debian clients, and if so, what client software you opted to use?<br>
Right now I have nss-pam-ldapd (http://arthurdejong.org/nss-pam-ldapd/) and the MIT-based krb software that's included in Debian 6 working decently. By that I mean I can use it to allow logins as expected, but so far I haven't worked out allowing or disallowing
login based on group membership.<br>
<br>
Obviously the best solution would be a "real" IPA client, but has anyone attempted this? I mucked around a bit with the SSSD included in the Debian repos(1.2.1) but didn't get it to work. Though in all fairness I didn't try THAT hard since it seems like SSSD
has evolved quite a bit since 1.2.1.<br>
Is the SSSD route worthwhile?<br>
<br>
I really just need group based logins, sudo controls I can handle based on groups with Puppet, but again, if the real client route isn't too much work that's of course preferable.<br>
<br>
I hope this makes sense, late friday and I have a horrible headache, so if it doesn't I apologize in advance. :)<br>
<br>
Regards<br>
Johan<br>
</div>
</body>
</html>