![](https://seccdn.libravatar.org/avatar/8cf2daa7694e65578c8c683f05152e5f.jpg?s=120&d=mm&r=g)
Verner Kjærsgaard wrote:
Torsdag 15 februar 2007 18:08 skrev Moby:
Verner Kjærsgaard wrote:
Hi list,
- has anyone tried using MS-Win2003R2 AD as authentication/authorisation for SuSE10.2 users?
if so, is there a how-to somewhere?
I have and it works quite well. Unfortunately, I did not find a single comprehensive HOW-TO or source of information, but got bits and pieces from different places and then added some bits of my own. One of these day (tm), time permitting, I may put together a how-to. In the meantime, feel free to ask.
- thank you!
In the MS box, I installed the "Identity Manager for Unix" component. I then added a user and filled in some UID, home path and some details. Now, I need MS to allow my Linuxbox to ask for authentication, how?
- second q: in the linux box, would one select NIS or LDAP as authentication mechanism? I would think NIX, but...?
- do I need the MS box to run a DNS server and all in order for this to work?
I am not using the MS "Identity Manager for Unix" components, nor is it really needed. There are no changes to be made on the M$ side. On the Linux side, install samba, samba-winbind, and krb5-client. Configure /etc/krb5.conf to point to your domain. Configure smb.conf to use winbind and use the idmap RID method. Then edit /etc/nsswitch to use winbind. -- --Moby -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org