LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 02-20-2006, 11:02 AM   #1
abhijeetudas
Member
 
Registered: Sep 2004
Distribution: Redhat / Fedora
Posts: 114

Rep: Reputation: 15
Active Directory on Linux


All,

Im intersting on Running a Active Directory Server on Fedora Core 3/4.
Im sure that there is some software that does this but just cant recollect the name.

Any clue'es any one.

PS i dont want to authenticate a linux client using Windows AD server i want the AD server to be on the linux machine itself.
 
Old 02-20-2006, 11:14 AM   #2
Finlay
Senior Member
 
Registered: Mar 2003
Location: Seattle
Distribution: Slackware ?-14.1
Posts: 1,029

Rep: Reputation: 47
You can't serve a true active directory on a linux server.
But you can come close using LDAP and SAMBA
 
Old 02-20-2006, 10:50 PM   #3
abhijeetudas
Member
 
Registered: Sep 2004
Distribution: Redhat / Fedora
Posts: 114

Original Poster
Rep: Reputation: 15
Im sure there is one which is really good.

One of the IBM guys had it running on a conference i had been to. He was running it on SUSE
 
Old 02-21-2006, 03:48 AM   #4
quiffhanger
LQ Newbie
 
Registered: Feb 2006
Posts: 3

Rep: Reputation: 0
Active Directory is a propriertory microsoft technology which certainly wont run on Linux (unless your a highly skilled WINE guru with a huge amount of time on your hands & scant regard of copyright law).

Samba can function as a domain controller, providing native authentication services for a windows client but it's feature set is more akin to NT4 than AD - there's a lot missing compared to AD: group policy & the whole forest/domain thing, to name a couple off the top of my head, but there's a lot more.

If it wasn't Samba and the IBM guy was demonstrating some fancy management features, etc, then if may have been some novell software he was showing you: I know v. little about it, but my understanding is that it can authenticate windows clients and has some pretty nifty management functions to boot: probably more akin to AD than Samba. It aint free though and migrating your network to novell would be no trivial undertaking.

-ross
 
Old 02-21-2006, 10:24 AM   #5
stress_junkie
Senior Member
 
Registered: Dec 2005
Location: Massachusetts, USA
Distribution: Ubuntu 10.04 and CentOS 5.5
Posts: 3,873

Rep: Reputation: 331Reputation: 331Reputation: 331Reputation: 331
quiffhanger is right. Here is some more information. The current release version of Samba is 3. The Samba project is trying to get (some) AD support into Samba 4. The Samba documentation is located here.

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/

Samba can act as a LanManager (NT4) domain controller if all of the other domain controllers are also Samba. Samba cannot act as a domain controller if any genuine Microsoft domain controllers exist.

In all other respects Samba emulates LanManager (NT4) networking. It provides the System Message Block (SMB) file sharing protocol. This protocol was invented by IBM; it is not a Microsoft product. SMB is much more robust than NFS. IMO you would do well to use Samba SMB protocol for file shares even in a pure Unix/Linux environment.

The last thing about Samba is that it not only allows you to set permissions on shares, like in LanManager, but you can also add Unix file permissions on the files in the shares. That is also true of Windows, but some people are impressed when you mention it.
 
Old 02-21-2006, 07:53 PM   #6
stickman
Senior Member
 
Registered: Sep 2002
Location: Nashville, TN
Posts: 1,552

Rep: Reputation: 53
Quote:
Originally Posted by abhijeetudas
Im intersting on Running a Active Directory Server on Fedora Core 3/4.
Im sure that there is some software that does this but just cant recollect the name.
Have you looked at OpenLDAP?
 
Old 03-02-2006, 04:03 PM   #7
DaveVT5
LQ Newbie
 
Registered: Dec 2005
Location: Blacksburg, VA
Distribution: Fedora Core 4
Posts: 12

Rep: Reputation: 0
This was a very helpful thread, so thanks to all who have posted so far. I am looking to replace a Windows 2000 Active Directory server with a Linux solution. The clients that will need authentication include Windows XP and Mac OSX (nothing older than that). I also running a few servers based on Fedora Core 4.

From what I gather Samba 3 sounds like a way to go, maybe the way. Is Samba all I need or do I also need LDAP? I read somewhere that OpenLDAP does not authenticate Windows XP users. I don't know if this is true or not.

I also have found an LDAP server called Fedora Directory Server which caught my eye because my servers are using Fedora. I basically am looking for some confirmation on my logic (or correction) and a few links on where I should go from here.

I am down to just two Microsoft servers at this point, one for VPN and this one for user authentication. I'm getting close!

Thanks in advance.
 
Old 03-04-2006, 12:15 PM   #8
scheidel21
Senior Member
 
Registered: Feb 2003
Location: CT
Distribution: Debian PPC/i386/AMD64 6/7, Vista, XP , WIN7, Server 03/08
Posts: 1,278

Rep: Reputation: 91
There is no one stop solution to replacing AD with Linux, however, I have read many articles which use DHCP, DNS, LDAP, and Samba which emulates most of the AD features. Don't quote me on this, but I believe the policies, etc can be done with LDAP, the filesharing is with Samba, and the DHCP and DNS work like the forests.
 
Old 03-06-2006, 12:30 PM   #9
DaveVT5
LQ Newbie
 
Registered: Dec 2005
Location: Blacksburg, VA
Distribution: Fedora Core 4
Posts: 12

Rep: Reputation: 0
Thanks scheidel21, My further research has indicated that going Samba 3-only is not what I am looking for. I need to include LDAP in the mix. I am not too interested in setting up the forests at the moment but running DNS and DHCP on the same machine seems logical for other reasons.

You mentioned that you have read some articles on setting this up. Would you please recommend one?

Thanks again!
 
Old 03-06-2006, 01:54 PM   #10
dbogdan
Member
 
Registered: Feb 2005
Location: Metro Detroit, US
Distribution: Suse/Slackware/Mepis
Posts: 174

Rep: Reputation: 30
Quote:
Originally Posted by scheidel21
There is no one stop solution to replacing AD with Linux, however, I have read many articles which use DHCP, DNS, LDAP, and Samba which emulates most of the AD features. Don't quote me on this, but I believe the policies, etc can be done with LDAP, the filesharing is with Samba, and the DHCP and DNS work like the forests.

For those who don't mind paying.... there IS Novell's eDirectory and Zenworks which is a VERY nice (IE. far superior) replacement for AD. And it all can run on SuSE (and to some extent Redhat).

Group policies, fileshares, DHCP/DNS, remote workstation control, single sign-on plus ALOT more..... there's also Groupwise for mail, clients and server for linux.

FYI
 
Old 03-07-2006, 07:38 PM   #11
jason.rohde
Member
 
Registered: Aug 2005
Location: Chicago
Distribution: RHEL5,CENTOS
Posts: 62

Rep: Reputation: 15
Talking

I have been playing with eDirectory on my home network. It is Very Nice. You can Down load a trial version of the Novell OES on novells website it includes eDirectory. Give it a try if you like Purchase the full version, Ithink it will be well worth the money
 
Old 03-08-2006, 06:27 AM   #12
dbogdan
Member
 
Registered: Feb 2005
Location: Metro Detroit, US
Distribution: Suse/Slackware/Mepis
Posts: 174

Rep: Reputation: 30
While the advantages of eDirectory over AD are vast, one point to mention is that you can run eDirectory on Linux,Netware,AIX,Solaris, and even Windows. AND you are NOT required to use a PC running Windows to take advantage of eDirectory (although you can).
 
Old 03-08-2006, 05:18 PM   #13
DaveVT5
LQ Newbie
 
Registered: Dec 2005
Location: Blacksburg, VA
Distribution: Fedora Core 4
Posts: 12

Rep: Reputation: 0
I appreciate the alternative suggestion. My setup is required to scale from 20 users up to about 40. So I think I'm going to stick with an OSS solution for now.

Does anyone have any suggestions on where I can go to read a comprehensive tutorial for setting up a LDAP/Samba server?
 
Old 05-01-2006, 08:56 PM   #14
ziox
Member
 
Registered: Apr 2004
Distribution: RedHat, Fedora, Suse, Debian, Gentoo, Mandrake
Posts: 132

Rep: Reputation: 15
http://www.samba.org/samba/docs/man/Samba3-ByExample/
Take a look at this link it might help.
 
Old 05-02-2006, 09:14 AM   #15
DaveVT5
LQ Newbie
 
Registered: Dec 2005
Location: Blacksburg, VA
Distribution: Fedora Core 4
Posts: 12

Rep: Reputation: 0
Thanks ziox, I'll check that out. I haven't spent much time looking into this since my last post, but its something that I can only put off for so long.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux and active directory foxk Linux - Newbie 7 09-28-2005 12:30 PM
Linux and Active Directory aznluvsmc Linux - Networking 1 07-11-2005 04:05 PM
Is there anything for Linux similar to Active Directory? AMDPwred Linux - Software 3 07-05-2003 07:54 PM
Linux and active Directory jmirles Linux - Networking 0 06-19-2003 07:22 PM
what is active directory in linux ? rinux Linux - Newbie 3 05-28-2003 11:56 AM


All times are GMT -5. The time now is 01:33 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration