Originally Posted by Ser Olmy
You'll still have to configure winbind, NSS and PAM if you want to log on to a Linux system with AD credentials and be able to map Windows SIDs to Unix UIDs and GIDs, just like before.
Hopefully, there is still activity on this thread ...
Your last statement caught my attention. I too have easily and simply provisioned Samba4 AD/DC as a replacement for SBS 2008 and have 10+ Windows workstations authenticating with no problem.
Now, I want to implement Single-Sign-On for Linux workstations. All documentation on the web shows how to do this with OpenLDAP, but as we know, the Samba4 server uses its own Heimdal LDAP, so the web instructions are apparently useless.
Since you say, "You'll still have to configure winbind, NSS and PAM if you want to log on to a Linux system ...", it appears you have some knowledge in this area. What is my first step in getting a Linux workstation to log on using the Samba4 server for authentication?
Need a push in the right direction. I'm lost!