Synchronize of LDAP and windows AD password

[nash11]

We are running LDAP in our linux system , all linux are sharing the password in the linux server ( ldap server ) , now if I want to join it to windows AD so that the linux user password is the same as the one in windows AD , is it possible to make the password of linux ldap and windows AD are synchronized ? thx.

[firesox]

At first, there are many scenarios covering this problem. The problem I see is having both, OpenLDAP and Active Directory, joined together based on just the LDAP implementations. I see no way accomplishing that without a good scripting exporting/importing users in LDIF format. If you just want the passwords being in one database, you can outsource this using either the kerberos implementation inside windows 2003 or an external linux based kerberos server. But you sure need the usernames for having a successful authentication process. So every user needs an account in either an external kerberos database or inside the Active Directory to have a working principle for authentication. This produces a little overhead, having users inside OpenLDAP, AD and, if externally used, a Kerberos-Database. Using the windows 2003 kerberos implementation works really perfect. Just install the MIT kerberos package and edit the krb5.conf. For interactive login you should also edit pam.d/system-auth using pam_krb5, and that's it.

Another way is to use samba with your already working OpenLDAP as a backend for samba. You can join this samba server to the windows domain as a domain member server. In this case your users are only inside OpenLDAP, and therefore you can't use the windows kerberos implementation, because there are no users inside. It makes more sense to have a working windows 2003 domain controller serving a domain and joining a samba/openldap server to it or (the emphasis is on or) to have a running openldap/samba server serving a domain and joining windows clients to it. But in this case you don't need an Active Directory and loose group policy management for your windows clients.

It's like everything in life: Just a decision.

[curtis119]

Moved from Networking & Security to Duplicate Threads.

https://forums.gentoo.org/viewtopic-t-466761-highlight-.html
_________________
Gentoo: it's like wiping your ass with silk.