My work environment is mainly Windows and Active Directory. Active Directory has no unix attributes extended. What is the best way to fully integrate a Linux box in that environment? I'd like the AD authentication to work seamlessly with all programs and services.
I've tried this approach a few times before. We have a separate OpenLDAP server for our Linux servers, and I've tried using that as an LDAP backend, but I kept running into too many problems with other services not being able to work correctly. I'm pretty sure I didn't do something right, but I didn't fully understand it. I was using the Samba how-to on samba.org.
I've also tried using IDMAP, which worked but was very slow. I guess ideally I'd like to be able to use LDAP to provide the Linux attributes, but use AD for password auth. Any help there?
Open to other suggestions or hints on how to better do this as well.