Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm beginning to tire of maintaining individual system files on my increasing number of Solaris servers (was 2, now 10 and growing strong). I'm looking at the Sun Java Directory Server as a non NIS/NIS+ solution.

We run a predominantly Windows shop here, and so I'm also toying with one of two things:

  1. Using Kerberos auth directly from the Solaris clients to AD (with appropriate utilities on the domain controllers), or
  2. Using the Directory Server and using their identity sync product to sync to the Windows domain

At this point I'm leaning more toward #2 because I only need to muck with AD if I (or the user community) want to share credentials between servers.

Any insight or horror stories are appreciated.

share|improve this question

4 Answers 4

up vote 4 down vote accepted

You can work with a BigAdmin article

Using Kerberos to Authenticate a Solaris 10 OS LDAP Client With Microsoft Active Directory

There is a little disclaimer on the page but it's like ntfs-3g. If it works and is useful, go for it.

share|improve this answer
    
Thanks, I've read that (twice, actually), but what I'm trying to determine is if I get better mileage from a Sun LDAP server that communicates with AD and authenticates non-Windows clients, or if I just have non-Windows clients use LDAP and Kerberos to authenticate directly to AD. –  Milner May 4 '09 at 12:48
    
Decided that getting clients to connect to AD is less overhead at this point, so I'm going to head down that route. Thanks! –  Milner May 11 '09 at 15:23

I might also suggest you take a look at LikeWise Open. http://www.likewise.com/products/likewise_open/index.php

I use it on roughly 18 Solaris 9 and 10 servers, and another 30-40 Linux servers. Its works fantastically, with very little issues in my environment.

share|improve this answer
    
I'd not seen Likewise Open before, so I'll check it out. Thanks for the link, it looks intriguing! –  Milner May 4 '09 at 12:49

Take a look at Centrify's DirectControl product.

share|improve this answer

We use Vintella Authentication System to authenticate/authorize users on 2000+ Solaris/Linux hosts against AD. Hope this helps.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.