LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Closed Thread
  Search this Thread
Old 07-22-2008, 10:13 AM   #1
adymcc
Member
 
Registered: Dec 2006
Posts: 31

Rep: Reputation: 17
Linux user accounts in AD?


Hi, I have a strange problem. Please do not flame me this is not my doing I have been asked to get this working.

The situation is that I currently have a number of linux/unix user accounts to migrate in to Windows AD (2003 R2 with services for unix installed)

I have been told that all users will have a user account in AD in a numeric format 01-2345, this is the user account they will use when they log in with a windows client.

When the same user logs in using a Linux client they need to use an account with an alpha character in front of it, i.e A12-2345. OK this is the crunch, there can be only one account in AD, no software or schema changes are allowed in AD.

Additionally the Unix users are required to be able to change their passwords on the Linux/Unix platform as well.


What I have tried so far:

Kerberos and LDAP clients configured with PAM modules allow the linux machines to authenticate to AD, works very well and allows the users to login and change there passwords. However I have found no way to translate the users login name from 12-2345 to A12-2345 for the linux platform as specified. Kerberos option auth_to_local does not seem to work at all in RedHat (or what am I doing wrong, more info if needed).

With this we have tried various iterations of trying to get LDAP to use different AD attributes such as userprinciplename and UID none of which would work.

Potential Options:

If you have any suggestions on the best way to go about this let me know.

OpenLDAP Proxy to AD with translation in place to rewrite the samaccountname field.

Samba and Winbind as a member of the AD domain, is there any way to rewite the Samba/Windows account names?

OpenLDAP server with full replication (including the password field) from AD, where I can manipulate the User ID field. I believe Fedora Directory server is capable of this but requires Passsync to be installed on the AD domain controller for full password synchronisation (management screwed this one, any suggestions?)
 
Old 07-22-2008, 04:48 PM   #2
adymcc
Member
 
Registered: Dec 2006
Posts: 31

Original Poster
Rep: Reputation: 17
Hi Mods, may be this thread would be better off in the Server section.

Could you move it please?
 
Old 07-24-2008, 05:30 AM   #3
adymcc
Member
 
Registered: Dec 2006
Posts: 31

Original Poster
Rep: Reputation: 17
TTT, No one got any ideas, how about Openldap proxy to active directory?
 
Old 07-24-2008, 11:03 PM   #4
reddazz
LQ Guru
 
Registered: Nov 2003
Location: N. E. England
Distribution: Fedora, CentOS, Debian
Posts: 16,298

Rep: Reputation: 76
In the future if you need your thread to be moved to a different forum, please use the report button and ask a moderator to do it for you instead of starting a new thread elsewhere. Cheers.
 
  


Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Migrating User Accounts from HP-UX to Linux kaplan71 Fedora 1 08-15-2006 04:17 PM
User Accounts and Groups in Linux dheroan Linux - Newbie 4 07-30-2006 10:02 PM
LXer: Linux 101: Manage user accounts in a multi-user Linux environment ... LXer Syndicated Linux News 0 06-27-2006 07:03 AM
how to create many user accounts using suse linux? uthinkicare Linux - General 6 06-09-2006 09:46 AM
how can i preconfigure linux user accounts??? win32sux Linux - General 4 12-28-2003 12:47 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 07:18 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration