HOW TO: SUSE Linux Enterprise Desktop SLED10 LDAP / Kerberos Authentication to Active Directory / Windows Server 2003 R2

Shannon_VanWagner · 03-23-2007, 02:20 PM

A new la entry has been added:

HOW TO: SUSE Linux Enterprise Desktop SLED10 LDAP / Kerberos Authentication to Active Directory / Windows Server 2003 R2

Quote:

SUSE Linux Enterprise Desktop ( SLED ) 10 Single Sign-On LDAP / Kerberos Authentication to Active Directory on Windows Server 2003 R2

It's been painful testing this and getting it to work.. So I thought I'd share what worked for me.

What's depressing is that I haven't found any resource that gives me specific instructions on how to set this up. There has been some awesome bits and pieces of information documented by truly great people on some some awesome websites.

Shannon_VanWagner · 03-28-2007, 06:23 PM

NOTE: In step 5 above, after joining the machine to the Windows domain with the net ads join -U domain-admin-username@DOMAIN.COM, issue the command kdestroy, otherwise the root user for the linux machine will be able to surf admin shares for windows machines on the network as domain admin.

Also in the krb5.conf file, replace AIRBIQUITY.COM with your respective domain name.

Related Reference Material
http://www.suseforums.net/index.php?showtopic=18932
http://forums.suselinuxsupport.de/in...=0#entry224708
http://blog.scottlowe.org/2007/01/15...ion-version-4/
http://blog.scottlowe.org/2007/03/22...ive-directory/
http://forums.fedoraforum.org/archiv...p/t-29825.html
http://www.redmondmag.com/columns/ar...itorialsID=858

dcostakos · 06-13-2007, 09:29 AM

Thanks so much for the detailed post. I have 1 question (maybe more later).

What is the behavior for authentication on this system when the user is off the network? I'm thinking specifically of laptop users who may take their laptop home and work offline (or off of VPN).

Thanks in advance.