Re: LDAP: possible problems with user authentication

[Germana Oliveira <germanaoliveirab@gmail.com>]

So, you're telling me that ADS/LDAP do the same thing you can do just with LDAP (without the interface) .. i mean, a directory service. Groups, rights and security is manage by the OS itself ¿?.

What Active Directory does is to give you the facility to manage all those things together?
But with Debian for example, and without AD, you can do it separately ¿? am i close?

Well i have to read a LOT.

Thanks!

2010/2/22 Alex Samad <alex@samad.com.au>

On Mon, Feb 22, 2010 at 05:31:57PM -0400, Germana Oliveira wrote:
> i just forgot something.
>
> AD manage the (user) permissions and groups stuff: Like - this user can
> access to this printer or that user can not use pen drive - and i haven`t
> found yet something like that in free Software, or something similar in LDAP
> or with LDAP (openLdap)

You are mixing things up.  ADS/LDap is a directory service, what you do
with that information is up to you.

ADS has a nice gui interface to place users in to groups.

The filesystem and security engine of windows determines access/rights.

>
> Someone have some idea
>
> 2010/2/22 Germana Oliveira <germanaoliveirab@gmail.com>
>
> > We are really convince that OpenLDAP is way better choice than Active
> > Directory, most if we  already decide that Debian is going to be our Servers
> > OS...
> >
> > i have been googling about openLdap problems and found nothing very
> > difficult or weird, most of then are user problems: bad configurations, etc.
> >
> > but really hopping you can tell me more about your experience, personal and
> > with professional (implementations in: industries, commercial, corporations,
> > organizations)
> >

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkuDTQwACgkQkZz88chpJ2P8XQCg0㳣牞⏄ⓐ⹧麫�
TIsAn1uE3rRqKUurCV02/HfMLR1ZvtT3
=NlQ9
-----END PGP SIGNATURE-----

-- 
Germana Oliveira

germanaoliveirab arroba gmail punto com
http://626f67.wordpress.com
http://slcarabobo.wordpress.com