Am Dienstag, den 30.12.2008, 23:40 +0100 schrieb Brandon S. Allbery KF8NH: > On 2008 Dec 30, at 5:48, Christoph Maser wrote: > > Why not? It works like a charm for me. It gives you SSO via kerberos. > > Also service principals work perfectly for me with an easy keytab > > frontend (net ads keytab). It is free, it is open source. It even > > supports logon caching (for laptops like Windows does). > > I'm using it on one system which needs both unix and windows logins to > work. I find it has to be restarted periodically or it chokes. > I had some similiar problems. In all cases i could find network issues as reason for those. You might want to analyse the logfiles of winbindd and maybe increase the loglevel.
One feature i missed to point out, with winbindd you can also easily limit who is allowed access to which system. There is a config directive which accepts AD group membership as required for login. It is also possible to use winbindd _and_ kerberos. Chris financial.com AG Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | Germany Frankfurt branch office/Niederlassung Frankfurt: Messeturm | Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis Eisenhofer | Dr. Yann Samson | Matthias Wiederwach Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender) Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID number/St.Nr.: DE205 370 553 _______________________________________________ Tech mailing list [email protected] http://lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
