Hi! (catching up with some really old mails that I've been meaning to reply to) On 12-11-19 05:34 PM, Petter Reinholdtsen wrote:
[Mike Gabriel]Hi D-E developers, cross-posting this piece of information to the d-e ML.Absolutely interesting. :) [Stéphane Graber]Then on the client side, install sssd (apt-get install sssd) and write something like that in /etc/sssd/sssd.conf:If Samba v4 is like AD, perhaps the AD backend in sssd version 1.9 can be used? It would provide simpler sssd.conf configuration. See <URL:http://jhrozek.fedorapeople.org/sssd/1.9.2/man/sssd-ad.5.html> for more information. In Debian Edu, sssd is already used for roaming workstations, and I suspect it would be a good idea to enable it for all profiles in the future.
Yep! That's the plan with Edubuntu, in a few months we plan to release the first version Edubuntu Server along with Edubuntu 13.04, the Samba 4 setup that it installs will mimick an AD domain very closely and as far as SSSD or a Windows desktop is concerned, it will just be a regular AD domain that you can join up to your existing AD infrastructure or have it run standalone. (I'll stop there before I get a wikipedia reads-like-an-advertisement tag)
I think that will also make it really easy to do the debian-edu / edubuntu user connectivity that we've had on the radar for a while, I'm interested in what debian-edu's long-term plans will be for authentication servers, either way I think it could be a really good thing for everyone.
-Jonathan