On May 12, 2012 4:28 AM, "Matthew Thode" <prometheanf...@gentoo.org> wrote: > > On 05/11/2012 09:51 AM, Vinícius Ferrão wrote: > > Hello Pandu, > > > > I have done a implementation using a daemon named sssd. It's sponsored by the Fedora Project if I remember correctly. > > > > It supports 2008r2 AD without much hassle. I've setup everything relying on LDAP for information and Kerberos for authentication. So you don't need things like nss-ldap, nslcd, nscd and other old services. You can handle almost everything with SSSD. And even better: SSSD supports offline server authentication in the case of your AD is down or not reachable at the moment. > > > > I can send you some links in the night (Brazilian night) when I will be at home. > > > > Sent from my iPhone > > > > On 11/05/2012, at 00:36, Pandu Poluan <pa...@poluan.info> wrote: > > > >> Hello list, > >> > >> I just want to know, what is your recommendation(s) to implement Active Directory authentication on Gentoo? > >> > >> I want to use AD not only for logins, but also for running daemons/services. > >> > >> *Ideally*, it would also allow me to manage my boxen using GPO, but I can live without that. > >> > >> Rgds, > > > I can attest to how awesome sssd is. I use it for linux server to linux > client, but the concept is still the same. >
Ahaha, this is what I've been looking for: a recommendation backed by experience ;-) Thanks for the heads up, guys! Honestly, this is the first time I ever heard of SSSD. Sounds very interesting... I'll certainly look into it. Rgds,
