Single sign-on suggestions?

[Alf-Ivar Holm]

"Eamonn Sullivan" <eamonn.sullivan at gmail.com> writes:

> On 7/26/06, Alf-Ivar Holm <alfh at student.matnat.uio.no> wrote:

>> Too bad the slapd approach didn't work out (yet).  

> thanks, will look into that. Slapd *is* working for me, just fine,
> with unix accounts. [...]  But I wasn't able to get LDAP integrated
> with Samba.

Yes, that was what I tried to express by "approach" - ie. a fully
functionally solution to all your problems (related to this issue).

> I suspect it's possible, after I create a domain controller, get
> winbind working and add a bunch of groups and users that Windows
> expects. But, really, it just isn't worth that level of complexity
> for two Ubuntu PCs and a Mac. I don't have any Windows PCs left in
> the house.

My bad: I thought you still had a Windows box and that was the
problem.  And since you wanted to use Samba I thought it was because
of the need access to/from Windows.

> What I probably should do is abandon Samba entirely and just go with
> NFS, but that has its own level of (arguably unnecessary) complexity.

I myself have had less problems with NFS than Samba (due to my
now-Windows background I guess), and since both Ubuntu/Linux and Mac
OS X is unixy I would suppose that it would be a breeze¹.  NFS would
just fix the shared disk problems though, not the centralised
management of separate users.  For that you would still need some
other functionality: NIS, LDAP, or some simple synchronisation of
password, shadow and group files.

         Affi

¹) A rather good description of the 16 groups limit of NFS mentioned
  in Al Gordon's post, and how to overcome it, can be found at:
  http://nfsworld.blogspot.com/2005/03/whats-deal-on-16-group-id-limitation.html