[SSSD] Comment about SSSD LDAP Provider vs. Winbind

Pasi Kärkkäinen pasik at iki.fi
Sun Dec 18 14:17:16 UTC 2011


Hello,

Feedback about:
"[SSSD] IMPORTANT: Your input requested: SSSD LDAP Provider vs Winbind":
https://fedorahosted.org/pipermail/sssd-devel/2011-December/007721.html

Sorry, I wasn't subscribed to the list earlier, so I couldn't reply to the original thread..

Why people use Winbind:
	- Allows integration between Linux and Active Directory easily.
	- No changes/modifications needed to AD or AD schemas.
	- No changes/modifications needed to AD users.
	- UID/GID generation/mapping on Linux side, no need to add UNIX attributes to AD users.
	- Linux computers using Winbind auth (joined to AD) show up as computer objects in AD.

So in short.. if you want/need to easily and quickly integrate a couple of Linux servers/computers with AD,
it's very simple and straight-forward with Winbind. 

(Yes I realize using krb5+LDAP instead, and configuring UNIX attributes for users in AD, is much better,
but it's also more complicated to set up and might be "overkill" for some smaller environments).

So I think as long as SSSD LDAP Provider allows "Winbind style" easy setup, 
mainly UID/GID generation/mapping on Linux side, it's good to replace Winbind.. 

My 2 (euro) cents..

-- Pasi




More information about the sssd-devel mailing list