LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise
User Name
Password
Linux - Enterprise This forum is for all items relating to using Linux in the Enterprise.

Notices

Reply
 
Search this Thread
Old 07-17-2006, 02:36 PM   #1
mstevensfullarmor
LQ Newbie
 
Registered: Jul 2006
Posts: 4

Rep: Reputation: 0
Replacing a Windows Domain Controller with a Linux:OpenLDAP importing from Windows AD


I am trying to import Active Directory data from a Windows domain controller into an OpenLDAP server. The goal is to replace the Windows DC with a Linux server. I have searched around on the web and not found a blog/walkthru/cookbook post on how to do this. It seems like a common task. If OpenLDAP is not the right product, please tell me the right one and point me at a walkthru.

This needs to support 2K data (i.e. group policy), not just the NT 4 Domain controller functions.

As an alternative, if there is a way to create group policy within a Linux based system Domain Controller, that would be sufficient for a proof of concept to the boss for getting Linux to replace Windows as a server. And I can manually recreate the group policies in the Linux environment. The critical thing is that it needs to work without installing new stuff on the client. Again, please point me at a walk thru for doing this (or post one as a reply)
 
Old 07-17-2006, 09:09 PM   #2
jstephens84
Senior Member
 
Registered: Sep 2004
Distribution: (Home)Opensolaris, Ubuntu, CentOS, (Work - AIX, HP-UX, Red Hat)
Posts: 2,054

Rep: Reputation: 83
If I remember right Group policies are only vaild for Windows 2000 servers and windows 2003 server. Microsoft uses their on ldap modified software.

As for the transfer of users you may want to look into replicating information. It may be able to be done. Openldap will be your best bet though. try this it may help.
http://enterprise.linux.com/article....id=101&tid=100
 
Old 07-24-2006, 07:46 PM   #3
StevenPritchard
LQ Newbie
 
Registered: Jul 2006
Location: Fairview Heights, IL
Distribution: Fedora
Posts: 6

Rep: Reputation: 0
Quote:
Originally Posted by mstevensfullarmor
This needs to support 2K data (i.e. group policy), not just the NT 4 Domain controller functions.
You'll need Samba 4 (currently in development) for that.
 
Old 07-26-2006, 03:27 PM   #4
mstevensfullarmor
LQ Newbie
 
Registered: Jul 2006
Posts: 4

Original Poster
Rep: Reputation: 0
Folks,

Thanks for the suggestions. Samba-4 is still too early in development to be useful. I haven't yet gotten OpenLDAP to be able to import a microsoft schema. There are a number of variances from the spec (some of which M$ documents) and thus the core.schema is not able to be used. No one seems to have successfully replicated AD with group policy with OpenLDAP.
 
Old 07-26-2006, 09:14 PM   #5
zer0hmz
Member
 
Registered: May 2006
Posts: 33

Rep: Reputation: 15
Man,
This is my opinion and strictly my opinion. If I were your boss I wouldn't feel comfortable with replacing such a critical part of my technology infrastructure with a technology that my staff doesn't feel comfortable supporting. I'm not sure how large your environment is, but that is a really risky migration, especially if you're not totally comfortable with it.

NOW, with that said, I'll admit, when I read the opening post, I was very intrigued I've been sysadmin'ing Windows environments for a while now and just recently dived into the Linux swimming pool. The more I use it, the more I am amazed of what it can do (particularly the Samba technology!)

Good luck with your project, definitely keep us posted on it
 
Old 07-26-2006, 10:48 PM   #6
jstephens84
Senior Member
 
Registered: Sep 2004
Distribution: (Home)Opensolaris, Ubuntu, CentOS, (Work - AIX, HP-UX, Red Hat)
Posts: 2,054

Rep: Reputation: 83
After reading zer0hmz post I say that he made a rather good point. This is going to be done in a test environment first right. I personally never do things in a live environment before it is tested, retested and I am happy with the results.
 
Old 07-27-2006, 09:26 AM   #7
mstevensfullarmor
LQ Newbie
 
Registered: Jul 2006
Posts: 4

Original Poster
Rep: Reputation: 0
Yes folks, test environment first. I have a small separate net that I am going to clone the Windows server on, remap machines in a slow progress to check scaling. Proof of Concept first, then cut over. Linux to Linux I understand, Linux to Windows Server is well documented, Windows to Windows works (but crashes far too often). But putting the Linux box in its proper role (IMHO) as the reliable invisible server has so far eluded me. Linux+Apache is far superior to Windows+IIS. Old Samba as a file server works well. Its the AD functions that elude me.
 
Old 09-09-2006, 11:47 AM   #8
jdm13
LQ Newbie
 
Registered: Sep 2006
Posts: 1

Rep: Reputation: 0
hello maybe this help you, but you have to pay...
h??p://nitrobit.com
 
Old 09-11-2006, 01:23 PM   #9
mstevensfullarmor
LQ Newbie
 
Registered: Jul 2006
Posts: 4

Original Poster
Rep: Reputation: 0
Thank you so much for the pointer. It looks promising. It is not free, but sometimes pay solutions that leverage open source are the best option. It uses OpenLDAP on the back end.
 
Old 08-27-2009, 04:41 AM   #10
knightsamar
LQ Newbie
 
Registered: Mar 2004
Location: India
Distribution: Red Hat Linux 9(Shrike)..right?
Posts: 2

Rep: Reputation: 0
Hey, any updates on this thread ?

I am trying to do the same thing and found something worth having a look OpenLDAP with Linux and Windows
 
Old 08-27-2009, 11:14 PM   #11
chrism01
Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.5, Centos 5.10
Posts: 16,269

Rep: Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028
Actually, that's pretty old 'August 5th, 2002' & Samba TNG (precursor to v3) and ldapv1.2.
Still a good read though.

This is Samba 3 http://www.linuxhomenetworking.com/w...nux,_and_Samba & LDAP v2 http://www.linuxhomenetworking.com/w...DAP_and_RADIUS
 
Old 02-07-2010, 12:47 AM   #12
otaku1
LQ Newbie
 
Registered: Nov 2009
Posts: 5

Rep: Reputation: 0
This will help you just follow the instructions it works like a charm

http://www.howtoforge.com/centos-5.x...h-ldap-backend
 
Old 01-26-2012, 05:08 PM   #13
elwarreno
LQ Newbie
 
Registered: Jan 2012
Posts: 1

Rep: Reputation: Disabled
have you looked at Resara Server? its a free/open source Linux domain controller based on samba4, its been around for a year now and seems to be developing a following.
 
1 members found this post helpful.
Old 02-08-2012, 04:54 PM   #14
custangro
Senior Member
 
Registered: Nov 2006
Location: California
Distribution: Fedora , CentOS , Solaris 10, RHEL
Posts: 1,935
Blog Entries: 1

Rep: Reputation: 188Reputation: 188
Another solution

http://freeipa.org
 
Old 02-15-2012, 06:05 PM   #15
cbtshare
Member
 
Registered: Jul 2009
Posts: 566

Rep: Reputation: 42
Quote:
Originally Posted by otaku1 View Post
This will help you just follow the instructions it works like a charm

http://www.howtoforge.com/centos-5.x...h-ldap-backend
This works best....but why would you want to do this?? Windows AD with groups policy and other management tools is better but less stable than linux acting as AD server.So why do this when you can simply use samba and authenticate against windows AD
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Regarding Connect the linux machine with windows domain controller hinetvenkat Linux - Networking 1 03-14-2006 11:50 AM
How Is Work Linux Domain Controller & Ms Windows Grave Linux - Networking 1 05-09-2005 07:19 AM
Authentication of Linux machines from windows 2000 domain controller jomy Linux - Networking 1 12-05-2004 02:25 AM
Windows domain controller and Linux Apox Linux - Networking 1 08-01-2003 07:25 AM
Linux Domain Controller over windows txq45 Linux - Networking 1 12-16-2002 04:53 PM


All times are GMT -5. The time now is 09:23 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration