Active Directory for Unix User Authentication 1

[gallows]

Has anyone configured their Solaris system to use Active Directory to take care of creating User accounts and authentication? I've been looking around for a couple of days and cannot find anything that would help me to set this up. Any help is greatly appreciated.

Thanks,
gallows

 

[coffeysm]

I was looking into this to I found a document from the SANS institute but there example used HP-UX which should not be that different. Anyway it involves using Kerberos, LDAP over SSL or IPSEC. Since Solaris 8 I believe does not support LDAP over SSL you would have to use IPSEC. I have not tried it yet but you also need Unix Services for windows and install the NIS Server to update the AD's Schema then you disable it since NIS is insecure. Windows uses Kerberos anyway as default for users and password so you just have to Solaris up to use it also. You also create a LDAP proxy account that Unix will connect to perform queries this why you need IPSEC or SSL to encrypt this info or the password will be sent over in clear text. This is just a overview I can forward you the document if you want though.

 

[aego]

Coffeysm, gallows,

I do not quite agree. Look for instance at URL:

http://www.bolthole.com/solaris/LDAP.html

This does not use IPSEC and should at least in part answer this question.



___________
I'm in yer face, even when you don't want me to be
___________

 

[gallows]

Thanks Coffeysm and aego.
Yes aego, that link is what I am looking for.

gallows

 

[coffeysm]

Well I have looked at that article several times and we were running solaris that I could not patch. Also I did not want to goto AD but if Management says to do it then I have to