Re: [SSSD-users] idmaping, AD multi domain forest

[John Hodrien]

On 20 Jan 2015 10:28, Longina Przybyszewska  wrote:
> Thanks for your answer-you sound very sceptic so I would be very happy if you can deepen your meaning;
> Is my goal  possible to achieve, is this the right strategy?? -
> to integrate Linux into AD with SSSD ,  NFS mounted homedir with Kerberos security,  cross realm authentication,
> with Posix attributes for user/group objects in AD .
>
> I have to mention that my boss supports me, and my MS-admin colleagues  have a positive attitude for the project.

I've done all of that other than the cross realm bit, and it works like a charm.

jh

idmaping, AD multi domain forest

[Longina Przybyszewska]

Good to know!
For my site this is important to get cross realm authentication and authorization because users and resources (storage) are in different domains.

Best,
longina

From: [e-mail] [mailto:[e-mail]] On Behalf Of John Hodrien
Sent: 20. januar 2015 11:41
To: End-user discussions about the System Security Services Daemon
Subject: Re: [SSSD-users] idmaping, AD multi domain forest

On 20 Jan 2015 10:28, Longina Przybyszewska <[e-mail]> wrote:
> Thanks for your answer-you sound very sceptic so I would be very happy if you can deepen your meaning;
> Is my goal  possible to achieve, is this the right strategy?? -
> to integrate Linux into AD with SSSD ,  NFS mounted homedir with Kerberos security,  cross realm authentication,
> with Posix attributes for user/group objects in AD .
>
> I have to mention that my boss supports me, and my MS-admin colleagues  have a positive attitude for the project.

I've done all of that other than the cross realm bit, and it works like a charm.

jh