ive seen a lot of reports that say active directory does NOT get along
well
with any other kind of directory service. its basically if you use it
that
is all you can use. i really feel sorry for anyone who is forced to use
AD.
currently at my company we are using Netscape directory server 3.1 on
a solaris 7 machine to provide LDAP address books, and we authenticate
our VPNs via RADIUS not ldap(IMO radius makes more sense for that
kind of stuff anyway :) ). i have extreme doubts you can get AD and
a normal LDAP server to synch with each other.
iplanet products do not seem to work at all under debian so ..i'm
not sure what to reccomend.
good luck with the AD stuff ..i wouldn't be caught dead using it.
nate
Tom Warfield wrote:
>
> Alright bear with me on this one while I explain what i want to do:
> Currently we have a Win2K domain (running Active Directory), also were
> using the better things in life like Debian for our email and etc. In the
> future were looking at installing a better firewall that has VPN support,
> and according to the company selling us the firewall we can use LDAP to
> authenticate users.
> Right now as it goes I have to setup the user on the Win2K server,
> then on
> the email server. Then in the future im going to have to also add them to
> the firewall. Remote sites which i will be controlling are going to be the
> same way. Plus right now we do not have any email address lists since were
> using outlook, well short of the users address book. So with that in mind
> we wouldnt mind seeing the other important information for the person
> besides there email address like there phone number and etc pull up in
> Outlook.
> Okay with all this in mind, im thinking LDAP is my answer to all of
> these problems. I should be able to setup everyone in LDAP and then LDAP
> will propogate all this information to the linux box, the firewall, the
> WIN2K server and also let my users query for addresses and information like
> that. Or maybe I would input the information into Win2K box and the LDAP
> server would pass it around...none the less something has to be in place to
> connect these several different devices on the network, soon to be networks!
>
> Any ideas would be appreciated.
>
> Thanks,
> Tom
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
--
:::
ICQ: 75132336
http://www.aphroland.org/
http://www.linuxpowered.net/
[EMAIL PROTECTED]
