I am trying to find a unified authentication scheme for linux servers to authenticate against Active Directory. Mainly these are Ubuntu and CentOS servers.
What I need:
- Free, stable solution
- Unified UID/GID such that permissions on a folder is the same, regardless of what server it's mounted from
- Support for recursive groups, and group mapping (E.G sudo permissions, and login permissions, such that only members of group X are allowed to log in)
- Home directory crossmount, such that home directory is crossmounted across servers for a unified experience
- Unified support for at least Ubuntu and CentOS (ideally any flavor)
- Keep local accounts (at minimum root)
- Ideally, a solution that doesn't need a computer account, but simply authenticate using LDAP bind, and then do group lookup for authorization (not knowing how this would impact the other requirements)
Alternatives I've found is:
- PowerBroker® Identity Services Open Edition (Formerly Likewise Open)
- Centrify Express
I've had a bad experience with likewise open in the past (authentication was randomly blocking ssh login), but I haven't tested the rebranded version. Centrify I haven't tried, but seems promising, although I haven't found a good resource as to how to accomplish my goals. Winbind I'm guessing is the most customizable one, at least in order to accomplish my last point.
I'm open to whatever solution that will solve my issue, but more than anything, I'm looking for an install guide for how to accomplish all of the above on both Ubuntu and CentOS
Is there any free tool available where I can solve my requirements with relative ease, if so, what's a valid configuration to do so?