[Freeipa-users] Desperate help requested.

[Steven Jones]

Hi,

Also if its straight into AD Im not aware you can use AD to control a Linux authentication and authorisation adequately without something like likewise or centrify.  I think the best yiu can do is one group?


regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

________________________________________
From: freeipa-users-bounces at redhat.com [freeipa-users-bounces at redhat.com] on behalf of David Juran [david at juran.se]
Sent: Thursday, 30 August 2012 7:30 p.m.
To: KodaK
Cc: freeipa-users at redhat.com
Subject: Re: [Freeipa-users] Desperate help requested.

On lör, 2012-08-25 at 23:05 -0500, KodaK wrote:
> I've just been informed by my boss's boss's boss that, and I quote
> from his ridiculous email:
>
> "we cannot use anything other than MS AD for authentication"
>
> I've spent months of time and much effort rolling out IPA,
> consolidating authentication across our Linux and AIX machines.  To
> paraphrase Babbage: I am not able rightly to apprehend the kind of
> confusion of ideas that could provoke such a statement.
>
> Regardless, I need some help.  I need some help with comparisons
> between FreeIPA and AD, and the problems and issues one might
> encounter when trying to authenticate Unix machines against AD.
> Anything that can show IPA being superior to AD for *nix
> authentication.  Anything at all.  We have a similar number of AIX and
> Linux servers.  We have a week before we have a meeting to discuss
> this, and I'd like to be armed to the teeth, if at all possible.

Apart from what everyone else already pointed out, I believe that if you
register the Linux host in the AD, you'll need to purchase a CAL for
it...

/David