On 6/2/05, Kenneth Porter <shiva(a)sewingwitch.com> wrote:
Agreed. I'm trying to get up to speed on deploying OpenLDAP
together with
the Samba schema to get single sign-on and a global address book, but it's
been tough marshaling all the HOWTO's to figure out what's really required.
I went down a wrong path using the PADL scripts bundled with OpenLDAP
(because I failed to select the "enhanced" schema in the common config
file) and they also fail badly on the /etc/services file due to the
presence of Apple protocols. So far the best information for initial setup
seems to be in the HOWTO's at <
http://samba.idealx.org/>, but I'm still
working through it to understand how to migrate my existing setup.
Single sign-on doesn't require a LDAP server, but some kind of central
identity magament which can be supplied by using a Kerberos V KDC like
the Kerberos V MIT implementation that comes in the form of krb5-*
packages for Fedora Core.
Once upon I time I wrote the attached document which enumerates all
the steps I had to perform in order to set up a Kerberos V KDC and how
to configure services like OpenSSH to support single sign-on. HTH.