CentOS DS and Windows XP authentication

britchaz · 05-04-2009, 09:45 AM

Hi,

I'm fairly new to Linux, but I'm trying to set up a CentOS 5.3 Directory Server to manage some Windows XP computers.

I know I'm either going to have to use LDAP or SAMBA correct?
Any help with joining of these two would be greatly appreciated.

acid_kewpie · 05-05-2009, 03:12 AM

Nothing to do with networking. Moved to Linux - Newbie.

Note you can't authenticate windows against LDAP by default, you'd need a separate gina, like pgina, to do that. Instead you'd use samba to make your server look like a domain controller, which would only use ldap internally.

linuxlover.chaitanya · 05-05-2009, 04:27 AM

http://rhems.sourceforge.net/rhldc.htm
Just got a hit on this project. Looks good though I have personally never used it. But will surely download and try it once.

britchaz · 05-06-2009, 09:18 AM

Quote:

Originally Posted by acid_kewpie

Nothing to do with networking. Moved to Linux - Newbie.

Note you can't authenticate windows against LDAP by default, you'd need a separate gina, like pgina, to do that. Instead you'd use samba to make your server look like a domain controller, which would only use ldap internally.

But how would I do the configuration of ldap? I've been working on this for a little while now and I'm making myself more confused every day, I think. Basically what I'm trying to do is have my Windows XP computer be able to log on through my CentOS server as a domain. Right now I can only do it as a workgroup. In my Samba settings, I have a shared folder set up to where everyone can view its contents, but when I go to my XP machine and look at the folder, it denies access.

custangro · 05-27-2009, 10:29 PM

Quote:

Originally Posted by britchaz

Hi,

I'm fairly new to Linux, but I'm trying to set up a CentOS 5.3 Directory Server to manage some Windows XP computers.

I know I'm either going to have to use LDAP or SAMBA correct?
Any help with joining of these two would be greatly appreciated.

You have to remember...

LDAP != ADS

LDAP isn't a "drop in replacement" for Active Directory...you can achieve "similar" functionality by integrating LDAP with Kerberos and Samba.

You may want to take a look at http://freeipa.org

linuxlover.chaitanya · 05-28-2009, 01:10 AM

Quote:

Originally Posted by custangro

You have to remember...

You may want to take a look at http://freeipa.org

A good tool to look into. But as all the other it is also not dead end replacement for ADS. As it is based on the Fedora Directory server, you can install it on your CentOS machine as well if you do not want to completely disown your current system.