Hi,
Does anyone know if it's possible to auth users against AD and how? I don't want to register the station to the domain, just auth the users against it. We have a local mediawiki installation that auths users against the AD without having any admin access to it.
Any ideas?
Lucian
On 03/25/14 06:08, Nux! wrote:
Hi,
Does anyone know if it's possible to auth users against AD and how? I don't want to register the station to the domain, just auth the users against it. We have a local mediawiki installation that auths users against the AD without having any admin access to it.
Any ideas?
Yes, you can. Yes, we do. We added krb5 in the mix last year, too.
mark
On 25.03.2014 12:01, mark wrote:
On 03/25/14 06:08, Nux! wrote:
Hi,
Does anyone know if it's possible to auth users against AD and how? I don't want to register the station to the domain, just auth the users against it. We have a local mediawiki installation that auths users against the AD without having any admin access to it.
Any ideas?
Yes, you can. Yes, we do. We added krb5 in the mix last year, too.
mark
Mark,
Thanks, can you point me to some docs?
Lucian
On 25.03.2014 12:20, Nux! wrote:
On 25.03.2014 12:01, mark wrote:
On 03/25/14 06:08, Nux! wrote:
Hi,
Does anyone know if it's possible to auth users against AD and how? I don't want to register the station to the domain, just auth the users against it. We have a local mediawiki installation that auths users against the AD without having any admin access to it.
Any ideas?
Yes, you can. Yes, we do. We added krb5 in the mix last year, too.
mark
Mark,
Thanks, can you point me to some docs?
Actually it looks rather easy, e.g. http://seriousbirder.com/blogs/centos-6-with-kerberos-authentication/
Thanks again, Mark.
On Tue, Mar 25, 2014 at 7:31 AM, Nux! nux@li.nux.ro wrote:
Does anyone know if it's possible to auth users against AD and how?
I don't want to register the station to the domain, just auth the users against it. We have a local mediawiki installation that auths users against the AD without having any admin access to it.
Actually it looks rather easy, e.g. http://seriousbirder.com/blogs/centos-6-with-kerberos-authentication/
That works for ordinary logins and ssh - you still need to add the users but you don't have to maintain passwords. Won't work for samba shares, though.
On 25.03.2014 15:48, Les Mikesell wrote:
That works for ordinary logins and ssh - you still need to add the users but you don't have to maintain passwords. Won't work for samba shares, though.
That blows, in this case I guess it's easier to just join the domain. Thanks for letting me know!
On Tue, Mar 25, 2014 at 2:17 PM, Nux! nux@li.nux.ro wrote:
On 25.03.2014 15:48, Les Mikesell wrote:
That works for ordinary logins and ssh - you still need to add the users but you don't have to maintain passwords. Won't work for samba shares, though.
That blows, in this case I guess it's easier to just join the domain. Thanks for letting me know!
It _might_ be possible to make ldap work with AD for samba - and if it is, I'd like to know. For the small number of people who need it here I've either added local smbpasswds or told them to use winscp instead.
On 25/03/2014 02:31 PM, Nux! wrote:
On 25.03.2014 12:20, Nux! wrote:
On 25.03.2014 12:01, mark wrote:
On 03/25/14 06:08, Nux! wrote:
Hi,
Does anyone know if it's possible to auth users against AD and how? I don't want to register the station to the domain, just auth the users against it. We have a local mediawiki installation that auths users against the AD without having any admin access to it.
Any ideas?
Yes, you can. Yes, we do. We added krb5 in the mix last year, too.
mark
Mark,
Thanks, can you point me to some docs?
Actually it looks rather easy, e.g. http://seriousbirder.com/blogs/centos-6-with-kerberos-authentication/
Thanks again, Mark.
Hi,
you can try this:
http://www.couyon.net/1/post/2012/04/enabling-ldap-usergroup-support-and-aut...
You need to edit the ldap fields for AD though.
Regards,
Todor Petkov wrote:
On 25/03/2014 02:31 PM, Nux! wrote:
On 25.03.2014 12:20, Nux! wrote:
On 25.03.2014 12:01, mark wrote:
On 03/25/14 06:08, Nux! wrote:
Does anyone know if it's possible to auth users against AD and how? I don't want to register the station to the domain, just auth the users against it. We have a local mediawiki installation that auths users against the AD without having any admin access to it.
Any ideas?
Yes, you can. Yes, we do. We added krb5 in the mix last year, too.
<snip>
Actually it looks rather easy, e.g. http://seriousbirder.com/blogs/centos-6-with-kerberos-authentication/
Thanks again, Mark.
Would have said more, but I'm busy fighting fires today. Hi,
you can try this:
http://www.couyon.net/1/post/2012/04/enabling-ldap-usergroup-support-and-aut...
You need to edit the ldap fields for AD though.
Yeah, we had that issue here, and I gather, from my manager, that it took *years*, literally, to get the WinBlows aedmins in charge of the AD to agree to add the necessary fields.
mark
-
Les Mikesell -
m.roth＠5-cent.us -
mark
-
Nux! -
Todor Petkov