Experieince with LDAPv3/Samba to replace AD/Group Policies

creed · 11-13-2004, 06:27 PM

hey all

i'm looking for anyone that has used LDAPv3 and Samba as an alternative to Windows AD and GRoup Policies. I'm mostly after how well it works, strenghts and weaknesses, and other information of that sort.

Assuming anyone has ever even used this or heard of this type of setup before

Belisarius · 11-20-2004, 08:27 PM

I've heard of it and played around with it, but I haven't seriously pursued it, as I'm not a Windows admin. Samba 3 is suppose to do this very well, but documentation on some of the more advanced elements is rough.

creed · 11-20-2004, 09:03 PM

hmmm ok i'll defaitnely agree that it's ahrd to find information. I'm trying to completely ditch Windows, but the two thigns that I want to enact are onyl windows based (to my knowledge) I want to make it so that I can completely lock down a system so admins can access everythng, but guest account can do almost nothing (web, messanger, thats' abotu it). and being able to do this over a domain woudl be nice as well.

since i knwo i cant get rid of the winblows desktops just yet, this is a start

idx · 11-21-2004, 05:41 AM

http://samba.cdpa.nsysu.edu.tw/samba...html#id2518205

Not sure that's possible with Samba. It seems to be able to act as a NT4 PDC, but not AD. We're [unfortunately] using AD at work to do exactly that. Lock down 2k/XP PC's so the end users don't screw them up with screen savers/spyware/etc.

The only thing I've been trying to do is come up with a way to change their AD password via LDAP. (PHP interface) I have all the right bits, but it looks like I have to convince the windows admins to enable a few things.. bah.

-r

creed · 11-21-2004, 07:36 AM

well there must be a wau to lock down system like windows has with group policies or someway. id' be surprised if Linux doesnt have that.

as for AD is there really a use for soemthing like that in the linux world or am I sounding totally liek a noob here

idx · 11-22-2004, 06:45 PM

Oh, I thought you wanted to lock down Windows-based PC's via Samba/LDAP without using AD.

What kinds of things do you want to lock down on a Linux box?

-r

creed · 11-24-2004, 07:47 AM

SOrry I did mean that I wanted to lock down windows systems with LDAPv3 and Samba, if its possible.

I"m trying to have ti so I dont need to get w2k3, save a few grand which can be used to update the old hardware here.