Single sign-on suggestions?

[Lea Gris]

Eamonn Sullivan a écrit :
> On 7/26/06, Alf-Ivar Holm <alfh at student.matnat.uio.no> wrote:
>> I haven't tested this approach, but someone seems to have succeeded by
>> using Active Directory, and it appeared that you hadn't tried that:
>>
>>         http://weblog.bignerdranch.com/?p=6
>>
>> Too bad the slapd approach didn't work out (yet).  I have been
>> thinking about trying that one, but haven't had the time.
>>
>>         Affi
> 
> thanks, will look into that. Slapd *is* working for me, just fine,
> with unix accounts. It's been working a couple of weeks now with no
> problems -- I can even change my password on either of the PCs and
> have it immediately reflected in the other.
> 
> But I wasn't able to get LDAP integrated with Samba. I suspect it's
> possible, after I create a domain controller, get winbind working and
> add a bunch of groups and users that Windows expects. But, really, it
> just isn't worth that level of complexity for two Ubuntu PCs and a
> Mac. I don't have any Windows PCs left in the house.

At home I used kherberos for that. Just kherberos and no LDAP. It handle 
centralized authentification and with a proper pam kherberos passwords 
can be changed from any workstation.

With no centralized account database (no ldap) each account must be 
created on each workstation. I guess OSX can be told to talk to a kdc 
somehow.

-- 
Léa Gris

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 254 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20060726/89d51b5c/attachment.sig>