Windows or LDAP authentication



Hi,

If Windows authentication is used as the primary mode of
authentication for a network, and Linux servers (SUSE) are being
introduced - is there a way to integrate Windows authentication?

The idea is that openSUSE will be used to run VMware guests, and I'm
concerned that if a non-admin user needs to log onto the guests (eg.
on the weekend when the support staff might not have network access at
the time), then we will need to provide the user with the root
password.

My other concern is that if we use the same root password for all the
Linux boxes then security might be compromised, if it is difficult to
change the root passwords en masse. When using more than 1 Linux
server is it possible to use some type of LDAP pass-through
authentication to AD? So that the root password is stored in AD? I
guess this must sound like heresy to some people, but it would make
user & security management much easier!

I'd be interested to here stories or experiences of integrating
Windows & Linux authentication.

Thanks,
Michael

.



Relevant Pages

  • Re: Windows or LDAP authentication
    ... authentication for a network, and Linux servers are being ... Why would a user need root? ... Linux boxes then security might be compromised, ... So that the root password is stored in AD? ...
    (alt.os.linux.suse)
  • NYC LOCAL: Wednesday 18 February 2004 NYLUG: Mordy Ovits on PAM, Pluggable Authentication Modules
    ... To: NYLUG Announcements ... Ovits on Understanding Authentication on Linux ... Unless you have already rsvp'ed for a prior meeting, ...
    (comp.os.linux.misc)
  • NYC LOCAL: Wednesday 18 February 2004 NYLUG: Mordy Ovits on PAM, Pluggable Authentication Modules
    ... To: NYLUG Announcements ... Ovits on Understanding Authentication on Linux ... Unless you have already rsvp'ed for a prior meeting, ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Linux basic authentication?
    ... I believe that the basic authentication mechanism is DIGEST ... Linux is very extensible and can accomodate ... Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Re: Using GSSAPI to Authenticate to AD
    ... if there is a way I can know/get ticket for authentication. ... creating users "using any of the AD integration packages on Linux". ... how do I initialize the security context for userB if my ... Incidentally there is a product called Plexcel that has worked out all ...
    (comp.protocols.kerberos)