Hi,
I'm looking to use FD as our main LDAP server - with Active Directory for windows clients and OpenDirectory for Apple clients. I was wondering if anyone had tried integration with Apple's software as I couldn't see anything in the docs or on the list?
If anyone has - any tips/pointers/pitfalls?
Billy.
A while ago I tried hooking up a MacOS X client to an Sun DS (which isn't to different from a FDS system) and it worked just fine, there was a fellow in Ireland who had this as an FAQ, I would have to look for the link but it seems that it would cut out the need for OpenDirectory altogether.
Cheers,
Aly.
On Wed, 7 Dec 2005, Billy Allan wrote:
Hi,
I'm looking to use FD as our main LDAP server - with Active Directory for windows clients and OpenDirectory for Apple clients. I was wondering if anyone had tried integration with Apple's software as I couldn't see anything in the docs or on the list?
If anyone has - any tips/pointers/pitfalls?
Billy.
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
On Wed, Dec 07, 2005 at 08:51:51AM -0700, Aly S.P Dharshi wrote:
A while ago I tried hooking up a MacOS X client to an Sun DS (which isn't to different from a FDS system) and it worked just fine, there was a fellow in Ireland who had this as an FAQ, I would have to look for the link but it seems that it would cut out the need for OpenDirectory altogether.
Ok - thanks. I'd like to have them talk to OD in order to get some of the extra's like limiting app/control-panel items, mobility etc without having to figure out how apple is storing it :-)
If it comes down to it though I'd rather just point them at FD :-)
Billy.
Truthfully you can integrate Window to FDS using PGina there is a link on the DS Wiki somewhere.
Here it the e-mail, it was geared towards OpenLDAP but I had it working on Sun DS server, which is very similar if not the same as FDS 1.0
---- Start of Paste ----
Hi all,
Here is my OSX authentictaion to OpenLDAP HOWTO.
http://www.tcd.ie/People/Paul.Reilly/MacLDAP/
It assumes no knowledge of OpenLDAP but it does assume knowledge of Linux, installing packages etc. I assume you have this as you are on the OpenLDAP list... :)
NOTE 1: Please note that I'm NO EXPERT on LDAP at all. If you asked me this time last year how it worked, I wouldn't have known! The info contained in the HOWTO is what I have discovered since last September when we decided to deploy MacOSX in on 120 iMacs in college. Apple has very little documentation on this (bad Apple!) and this info is pieced together from various websites and trial and error experimentation.
NOTE 2: Whats contained here is just a _basic_ authentication setup. It doesn't cover the following topics, but these are possible and we have them working here (docs in development)
* LDAP over SSL/TLS working OK (this should be the default in production environment)
* Auto-mounting of $HOME directories from a Windows/Linux smb:// or Mac afp:// file share for each user (see HOWTOS at http://www.jamfsoftware.com)
* OpenLDAP passthrough Authentication to a window PDC (keep attributes in OpenLDAP, but use PDC for auth)
* Account Lockout/Expiry (for this see Apple's Open Directory mappings)
As you'll see my HOWTO is a work-in-progress.
If you find it useful to you, please consider sending me a postcard from your part of the world.
Paul
+--------------------------------------------------------------------------+ | Paul Reilly email: paul.reilly@tcd.ie | | Unix Systems Administrator phone: +(353)-01-608-3641 | | IS Services, Trinity College Dublin fax: +(353)-01-671-1181 | | Dublin 2, Ireland web: http://tcd.ie/People/Paul.Reilly/ | +--------------------------------------------------------------------------+ | If you think of MS-DOS as mono, and Windows as stereo, then Linux is | | Dolby Pro-Logic Surround Sound with Bass Boost and all the music is free | +--------------------------------------------------------------------------+
---- End of Paste ----
On Wed, Dec 07, 2005 at 09:22:13AM -0700, Aly S.P Dharshi wrote:
Truthfully you can integrate Window to FDS using PGina there is a link on the DS Wiki somewhere.
Yeah - we already have quite an investment in AD for other purposes and only one Windows guy, so I'd rather not impinge on him too much :-)
Here it the e-mail, it was geared towards OpenLDAP but I had it working on Sun DS server, which is very similar if not the same as FDS 1.0
Sadly, the link is broken :-/ I'll try dropping him a mail and see if he is still around :-)
Thanks for the info.
Billy.
Billy Allan wrote:
On Wed, Dec 07, 2005 at 09:22:13AM -0700, Aly S.P Dharshi wrote:
Truthfully you can integrate Window to FDS using PGina there is a link on the DS Wiki somewhere.
Yeah - we already have quite an investment in AD for other purposes and only one Windows guy, so I'd rather not impinge on him too much :-)
Here it the e-mail, it was geared towards OpenLDAP but I had it working on Sun DS server, which is very similar if not the same as FDS 1.0
Sadly, the link is broken :-/
You should try the archives ....
http://web.archive.org/web/20030908035104/http://www.tcd.ie/People/Paul.Reil...
--Chandra
I'll try dropping him a mail and see if he is still around :-)
Thanks for the info.
Billy.
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
Doesn't seem to work !
You should try the archives ....
http://web.archive.org/web/20030908035104/http://www.tcd.ie/People/Paul.Reil...
--Chandra
Billy Allan wrote:
On Wed, Dec 07, 2005 at 08:51:51AM -0700, Aly S.P Dharshi wrote:
A while ago I tried hooking up a MacOS X client to an Sun DS (which isn't to different from a FDS system) and it worked just fine, there was a fellow in Ireland who had this as an FAQ, I would have to look for the link but it seems that it would cut out the need for OpenDirectory altogether.
Ok - thanks. I'd like to have them talk to OD in order to get some of the extra's like limiting app/control-panel items, mobility etc without having to figure out how apple is storing it :-)
OD is basically openldap, so you might be able to manually setup users (syncronise with a perl script from FD) and just have passwords refer to the master through something like sasl (e.g. http://www.openldap.org/faq/data/cache/944.html)
If it comes down to it though I'd rather just point them at FD :-)
Unless you feel strongly about using OD, I'd go with FD too ;-)
Billy.
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
389-users@lists.fedoraproject.org