[Fedora-directory-users] Integration with Apple's OpenDirectory

[Billy Allan]

Hi,

I'm looking to use FD as our main LDAP server - with Active Directory
for windows clients and OpenDirectory for Apple clients.  I was
wondering if anyone had tried integration with Apple's software as I
couldn't see anything in the docs or on the list?

If anyone has - any tips/pointers/pitfalls?


Billy.

[Aly Dharshi]

A while ago I tried hooking up a MacOS X client to an Sun DS (which isn't
to different from a FDS system) and it worked just fine, there was a
fellow in Ireland who had this as an FAQ, I would have to look for the
link but it seems that it would cut out the need for OpenDirectory
altogether.

Cheers,

Aly.

On Wed, 7 Dec 2005, Billy Allan wrote:

> Hi,
>
> I'm looking to use FD as our main LDAP server - with Active Directory
> for windows clients and OpenDirectory for Apple clients.  I was
> wondering if anyone had tried integration with Apple's software as I
> couldn't see anything in the docs or on the list?
>
> If anyone has - any tips/pointers/pitfalls?
>
>
> Billy.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
-- 
Aly S.P Dharshi
aly.dharshi(a)telus.net

	 "A good speech is like a good dress
	  that's short enough to be interesting
	  and long enough to cover the subject"

[Billy Allan]

On Wed, Dec 07, 2005 at 08:51:51AM -0700, Aly S.P Dharshi wrote:
>  A while ago I tried hooking up a MacOS X client to an Sun DS (which
> isn't
>  to different from a FDS system) and it worked just fine, there was a
>  fellow in Ireland who had this as an FAQ, I would have to look for the
>  link but it seems that it would cut out the need for OpenDirectory
>  altogether. 

Ok - thanks.  I'd like to have them talk to OD in order to get some of
the extra's like limiting app/control-panel items, mobility etc without
having to figure out how apple is storing it :-)

If it comes down to it though I'd rather just point them at FD :-)



Billy.

[Aly Dharshi]

Truthfully you can integrate Window to FDS using PGina there is a link on
the DS Wiki somewhere.

Here it the e-mail, it was geared towards OpenLDAP but I had it working on
Sun DS server, which is very similar if not the same as FDS 1.0

---- Start of Paste ----

Hi all,

Here is my OSX authentictaion to OpenLDAP HOWTO.

http://www.tcd.ie/People/Paul.Reilly/MacLDAP/

It assumes no knowledge of OpenLDAP but it does assume knowledge of Linux,
installing packages etc. I assume you have this as you are on the
OpenLDAP list... :)

NOTE 1:
Please note that I'm NO EXPERT on LDAP at all. If you asked me this time
last year how it worked, I wouldn't have known! The info contained in the
HOWTO is what I have discovered since last September when we decided to
deploy MacOSX in on 120 iMacs in college. Apple has very little
documentation on this (bad Apple!) and this info is pieced together from
various websites and trial and error experimentation.

NOTE 2:
Whats contained here is just a _basic_ authentication setup.
It doesn't cover the following topics, but these are possible
and we have them working here (docs in development)

 *  LDAP over SSL/TLS working OK
    (this should be the default in production environment)

 *  Auto-mounting of $HOME directories from a Windows/Linux
    smb:// or Mac afp:// file share  for each user
    (see HOWTOS at http://www.jamfsoftware.com)

 *  OpenLDAP passthrough Authentication to a window PDC
    (keep attributes in OpenLDAP, but use PDC for auth)

 *  Account Lockout/Expiry
    (for this see Apple's Open Directory mappings)


As you'll see my HOWTO is a work-in-progress.

If you find it useful to you, please consider sending me a postcard
from your part of the world.

Paul

+--------------------------------------------------------------------------+
| Paul Reilly                                    email: paul.reilly(a)tcd.ie
|
| Unix Systems Administrator                     phone: +(353)-01-608-3641
|
| IS Services, Trinity College Dublin              fax: +(353)-01-671-1181
|
| Dublin 2, Ireland                 web: http://tcd.ie/People/Paul.Reilly/
|
+--------------------------------------------------------------------------+
| If you think of MS-DOS as mono, and Windows as stereo, then Linux is
|
| Dolby Pro-Logic Surround Sound with Bass Boost and all the music is free
|
+--------------------------------------------------------------------------+

---- End of Paste ----


-- 
Aly S.P Dharshi
aly.dharshi(a)telus.net

	 "A good speech is like a good dress
	  that's short enough to be interesting
	  and long enough to cover the subject"

[Billy Allan]

On Wed, Dec 07, 2005 at 09:22:13AM -0700, Aly S.P Dharshi wrote:
>  Truthfully you can integrate Window to FDS using PGina there is a
> link on
>  the DS Wiki somewhere. 
Yeah - we already have quite an investment in AD for other purposes and
only one Windows guy, so I'd rather not impinge on him too much :-)

 
>  Here it the e-mail, it was geared towards OpenLDAP but I had it
> working on
>  Sun DS server, which is very similar if not the same as FDS 1.0 
Sadly, the link is broken :-/  I'll try dropping him a mail and see if
he is still around :-)  

Thanks for the info.



Billy.

[Chandrasekar Kannan]

Billy Allan wrote:
>  On Wed, Dec 07, 2005 at 09:22:13AM -0700, Aly S.P Dharshi wrote:
>    
> > Truthfully you can integrate Window to FDS using PGina there is a link on
> > the DS Wiki somewhere.
> >     
>
>  Yeah - we already have quite an investment in AD for other purposes and
>  only one Windows guy, so I'd rather not impinge on him too much :-)
>
>   
>    
> > Here it the e-mail, it was geared towards OpenLDAP but I had it working on
> > Sun DS server, which is very similar if not the same as FDS 1.0
> >     
>
>  Sadly, the link is broken :-/   
You should try the archives ....

http://web.archive.org/web/20030908035104/http://www.tcd.ie/People/Paul.R...

--Chandra


>  I'll try dropping him a mail and see if
>  he is still around :-)  
>
>  Thanks for the info.
>
>
>
>  Billy.
>
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

[Aly Dharshi]

Doesn't seem to work !

>  You should try the archives ....
>
>  http://web.archive.org/web/20030908035104/http://www.tcd.ie/People/Paul.R...
>
>  --Chandra 
-- 
Aly S.P Dharshi
aly.dharshi(a)telus.net

	 "A good speech is like a good dress
	  that's short enough to be interesting
	  and long enough to cover the subject"

[David Barker]

Billy Allan wrote:

> On Wed, Dec 07, 2005 at 08:51:51AM -0700, Aly S.P Dharshi wrote:
>   
>
> >A while ago I tried hooking up a MacOS X client to an Sun DS (which isn't
> >to different from a FDS system) and it worked just fine, there was a
> >fellow in Ireland who had this as an FAQ, I would have to look for the
> >link but it seems that it would cut out the need for OpenDirectory
> >altogether.
> >    
> >
>
>
> Ok - thanks.  I'd like to have them talk to OD in order to get some of
> the extra's like limiting app/control-panel items, mobility etc without
> having to figure out how apple is storing it :-)
>   
>  
OD is basically openldap, so you might be able to manually setup users 
(syncronise with a perl script from FD) and just have passwords refer to 
the master through something like sasl (e.g. 
http://www.openldap.org/faq/data/cache/944.html)

> If it comes down to it though I'd rather just point them at FD
> :-)
>   
>  
Unless you feel strongly about using OD, I'd go with FD too ;-)

> Billy.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   
>