Re: Kerberos related question

2013-05-13 Thread John Gross
Here is a more concrete example. http://www.it.cornell.edu/services/active_directory/howto/objects/join-linux.cfm You could use ad2yp to join linux systems to CornellAD Domain. Any defined security group in CornellAD Domain could be used as the authorized Linux users for your system. Conta

Re: Kerberos related question

2013-05-13 Thread John Gross
Simplicity is the best answer to both. ad2yp is probably most useful to workgroups using Linux in an Active Directory environment that does not contain Unix extensions but does allow subgroups in the directory structure to define their own groups and group memberships. For the example of a camp

RE: Kerberos related question

2013-05-13 Thread James M. Pulver
A couple questions: 1) why selectively import users? Why not just have a single account store in AD? 2) SSSD? -- James Pulver LEPP Computer Group Cornell University From: owner-scientific-linux-us...@listserv.fnal.gov [mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of John Gr