LDAP: How to get linux to recognize computer objects in Active Directory

kenneho · 02-01-2010, 03:49 AM

Hi all.

I'm trying to get our linux servers to use Active Directory (AD), and have gotten our linux (RHEL 5) server to fetch users and groups from AD. Now I'd like to add computers (and groups of computers) to AD, and have our linux boxes make use of this info. Does anyone know how to get our linux-boxes to understand computers and computer group objects on AD?

Regards,
kenneho

acid_kewpie · 02-02-2010, 12:27 AM

What do you expect to happen if it recognises them? There's no concept within Linux that matches up against computer group objects, so I'm not clear on how you expect the end result to look and work. Do you want them as netgroups or something?

kenneho · 02-02-2010, 04:00 AM

Quote:

Originally Posted by acid_kewpie

What do you expect to happen if it recognises them? There's no concept within Linux that matches up against computer group objects, so I'm not clear on how you expect the end result to look and work. Do you want them as netgroups or something?

Yeah, the netgroup kind of thing is actually what I'm looking for. When playing around with our Red Hat Directory Server I was able to add computers into netgroups, and make use of this information in PAM. This way I could grant groups of users access to groups of computers.
Currently, I've gotten the user group thing working when playing around with AD, but not the computer group thing. Is there any way I can maintain computer and computer group information in AD for use on linux?

- kenneho