Active directories is very heavy on kerberos- it's theoretically possible to use the same kerberos for both the active directory and linux- I've read you can even convince active directories to use a linux kerberos server.

I only briefly looked into this b/c it means switching to kerberized deamons, etc. very annoying.

I personally think the way to go is a TACACS+ server with an LDAP backend.
yonah

Oded Arbel wrote:

Hi list.

I recently read somewhere about kerberos 5 mentioned in the same sentence with single sign-on. I wonder how can I get single sign-on on my Linux workstation ?

I currently log in using the office's Active Directory (winbind 3), use some windows and samba file servers, fish and FTP, and maybe HTTP logins (we have squirelmail for accessing the office mail server, and sometimes its useful to use it instead of kmail or whatever). I would like to have as little password typing as possible after the inital login (lets put aside for a while SSH key exchange and password wallets). is there any way to get at least SMB access a-la-windows ?




================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]



Reply via email to