Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Just a simple question; this question is not meant to attack Windows or start a flame war in anyway. I want a viable solution to the way authentication is done in Windows DC environment (LDAP) on *nix. I just want to know if OpenLDAP can be that solution?

share|improve this question
up vote 7 down vote accepted

Microsoft Active Directory is (mainly) just an LDAP server, some pre-cooked schemas and some tools for interacting with it and Kerberos. OpenLDAP is pretty much a drop-in replacement for the former.

While you could design your own AD compatible schemas (or if you already have an AD schema, just import it into openLDAP) and write your own tools for managing the datasets there are solutions runing on top of openLDAP available, e.g. GoSA, freeIPA see the samba wiki for more stuff

Not sure where Samba 4 has got to (its expected to add drop-in replacement functnioality for MSAD).

share|improve this answer
Awesome thanks. – jersten Nov 27 '11 at 23:09

Absolutely. This is generally provided by pam_ldap. There is a specific schema that needs to be imported to the OpenLDAP directory to get the right attributes you need to use it as a Unix authentication source, but it works very reliably.

share|improve this answer
Awesome thanks. – jersten Nov 27 '11 at 23:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.