Hello,
Feedback about:
"[SSSD] IMPORTANT: Your input requested: SSSD LDAP Provider vs Winbind":
https://fedorahosted.org/pipermail/sssd-devel/2011-December/007721.html
Sorry, I wasn't subscribed to the list earlier, so I couldn't reply to the
original thread..
Why people use Winbind:
- Allows integration between Linux and Active Directory easily.
- No changes/modifications needed to AD or AD schemas.
- No changes/modifications needed to AD users.
- UID/GID generation/mapping on Linux side, no need to add UNIX attributes to AD users.
- Linux computers using Winbind auth (joined to AD) show up as computer objects in AD.
So in short.. if you want/need to easily and quickly integrate a couple of Linux
servers/computers with AD,
it's very simple and straight-forward with Winbind.
(Yes I realize using krb5+LDAP instead, and configuring UNIX attributes for users in AD,
is much better,
but it's also more complicated to set up and might be "overkill" for some
smaller environments).
So I think as long as SSSD LDAP Provider allows "Winbind style" easy setup,
mainly UID/GID generation/mapping on Linux side, it's good to replace Winbind..
My 2 (euro) cents..
-- Pasi