Fedora Directory Server sync Active Directory

paul_mat · 09-07-2005, 06:26 PM

hi there,

i'm looking at a way to sync a linux LDAP server with Active Directory and i've come across a few referances to Fedora directory server being able to sync passwords with Active directory but no information on how to do it.

am i reading the last part of this forum wrong or can i sync user, group and password information with FDS & ADS

http://www.ldapguru.org/modules/newb...6&post_id=7546

anand_kt · 09-08-2005, 02:30 PM

why do u want to have both and then take the pain on syncing them?? Wont one of them do the job? i.e either ADS or Fedora Directory whatever, never heard of it before... is it like NIS? or NIS+??

pveeneman · 09-08-2005, 04:29 PM

The Fedora distro, as with many others, has the ability to use a combination of Samba, Winbind (daemon used by samba for authentication process), and Kerberos (MIT or Heimdal, depending on linux distro). However, this is typically done if the Fedora server will be providing a CIFS or "Windows" Share on the network and authenticating user access against an existing MS ADS Domain Controller, not generally to share and exchange Active Directory info with an active MS ADS Domain Controller.

If the Fedora server is going to act as the Domain Controller, then the secruity is that of an NT 4.0 PDC Domain Controller with a local user accounts database.

Check Samba.org for more info.

Hope this helps,

-Paul

paul_mat · 09-08-2005, 05:26 PM

fedora directory server is an LDAP server, much the same as OpenLDAP, it was the old Netscape Directory Server, redhat have purchased it, re-branded it and released the source code.

thanks for the info pveeneman but i've already configured Samba & OpenLDAP & phpldapadmin to run as a PDC. now i'm looking for a way to sync Active directory with a Linux LDAP server, so i can run postfix LDAP.

i currently have a fedora mail server and a windows 2000 domain controller. i want to get postfix to authenticate against an LDAP server and get the aliases and username from the LDAP server.

so if i can get a linux LDAP server to sync with ADS then i'll only have to add one user to ADS and a user and postfix aliase will already be made on fedora.

anand_kt · 09-08-2005, 10:55 PM

but still, why? why both?

paul_mat · 09-09-2005, 12:25 AM

okay, valid point, now my next question, can i get postfix to do LDAP lookups with active Directory?

nabeelmoidu · 09-21-2005, 10:22 AM

Check out these archives
They'll give u all the answers u want
www.redhat.com/archives/fedora-directory-users

nabeelmoidu · 09-21-2005, 10:24 AM

Check out this one too
http://docs.opengroupware.org/Member.../fc2ogo1a/view

leedogg77 · 03-08-2007, 10:51 AM

You must work for a small company to be so stuck on the reason for this person wanting to do this. There are plenty of situations where a single system may authenticate against a Linux LDAP server. Perhaps this system is controlled by a subsidiary of a larger organization and the larger organization controls the majority of the AD schema. There are literally hundreds of possible reasons of why a person may want to do this.