That's what i'm recently thinking about a lot, too. The big Problem in my opinion is the use of an LDAP server to auth Windoze users.
My direction is now using PAM and varius ldap modules with openldap for most of the Linux ware and pam_smb (or similar) for Windoze. Also Exchange is an poor LDAP server, so this could be a chance too. Netscape offers an tricky piece of software that transfers the Login Information of NT to an LDAP Server (didn't remember where to get it, sorry). Didn't figure out yet how to use this yet, but there are already people using it. so it schould be manageable. As i understand it by now it uses a trick to capture the change of passwords and transmit them to an ldap server... i'd like to hear from people who have done s.th. like this already... ar -----Ursprüngliche Nachricht----- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 25. April 2001 16:55 An: debian-isp@lists.debian.org Betreff: LDAP as userdatabase for UNIX & W2k Hi there! I am currently running an in-house system for account mangement on Debian. I'm using MySQL as backend database, and have a couple of scripts converting the configuration from the MySQL database into configuration files for Apache, Proftpd, qmail, etc.. Now, I am considering to remake this system totally, and one of my plans is to use Ldap for everything. But my Ldap knowledge is very limited, so maybe someone could help me out. Would it be wise to use ldap as global configuration database, where users/domains etc. are in relations with each other in ldap? Is it possible to use ldap as authentication source for w2k servers (I know, this might sound off topic, but relevant for the Linux community too)? My goal here is to make an easy extendable mangement system, which is crossplatform (on the backend), by using ldap. I might be completely off, so help me get these things straight ;)) Cheers! -- Paul Fleischer / ProGuy -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]