Hola,
I have LDAP server, it is configured and all is very well, i use it to make some authentication for our Servers and routers.
Also i integrates LDAP with Radius and all is work, so LDAP is powerfull to the company.
Last week my manager ask me to try making these authentication for all of Company computers which is windows.
So, can i use LDAP, or Active Directory ???
I wish to use LDAP, thanks in advance.

The most common practice is to create a sub-domain for Windows and use Active Directory for that domain. So if your organization is example.com (dc=example,dc=com), then create ad.example.com (dc=ad,dc=example,dc=com). Without Active Directory and integrated DNS, Windows can be very challenging to manage.

If you do want to use regular LDAP, it can be done. You will need to manually create a lot of the DNS zones and records that Active Directory relies on and that will just take a lot of searching Online and a lot of guessing and testing.

1 members found this post helpful.

It is not that complicated! You can use Samba as a domain controller. If you do so it will act like Active Directory.

1 members found this post helpful.

cool, thanks for all
so, i need to arrange my steps
first, i need to setup samba server to use it as a domain controller.
second, Ldap and DNS
so, what can i do by DNS ???
i need some documentations for that, if you can

In this thread I have asked how to set this up. You might want to make some changes, but for me this works just fine!

http://www.linuxquestions.org/questi...lients-782039/

1 members found this post helpful.

thanks my friend, i will read it ...

Dear thanks a lot for your informations, but now i have ldap and it is already integrated with all of my servers like Asterisk, Samba, DNS ,,,,
so, i need to use it to set user permissions to my windows clients and network resources.
do you have some tutorials ???

Well, I don't have a tutorial at hand, but you can run logon-scripts and set permissions as you would do with normal Active Directory. The only difference is that you have to script the changes, so they will be added to the registry at log on. That is pretty much the same way as Active Directory does it. For file share permissions, you can find everything you need at Samba.

1 members found this post helpful.