William, thanks for your quick response. My principal preference for 389-ds is the multimaster replication. I need some Windows users can authenticate in 389-ds but not using third-party software such as pGina. 

I know that 389-ds is just a directory but I read this post (http://directory.fedoraproject.org/docs/389ds/howto/howto-samba.html) and I would like to know if the solution can be valid or if there is another alternative. 

Thanks again.

2016-07-06 21:32 GMT-04:00 William Brown <wibrown@redhat.com>:
On Thu, 2016-07-07 at 01:23 +0000, ayeja153@gmail.com wrote:
> Hello everyone, this is my first post. I am looking for an alternative to migrate from Active Directory. I would like to know if it is possible the "human" integration between samba4 and 389-DS.
>

I think we need to know a bit more about your use case.

389-ds is not a "drop in" replacement for MS AD. Nor is 389-ds easily
able to be a component of samba4.

Samba4 can act identically to an MS ADDC. It will be the same as you
currently have, and you can even move all the FSMO roles over, then
decommission your current ADDCs. This would give you a pure open source
solution.

If you wanted to *migrate* from ADDC to 389-ds, you could probably do so
over time with a winsync agreement, then cut over applications to
389-ds. Following sometime, you would cancel the winsync agreement, and
be on 389-ds only.

However, I do not know what you mean by "human integration".

I think you need to expand on your current system, what you want to
achieve, and what your goals are. This way we can give you better advice
on the correct solution.

--
Sincerely,

William Brown
Software Engineer
Red Hat, Brisbane

--
389-users mailing list
389-users@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org