I have a network of about 3-6 CentOS servers, with about 5-10 users (currently, and near future). I'm looking for a solution for centralized managements of users.
My requirements from it are:
- Linux authentication (login to servers)
- Integration with Samba - only to expose Linux files to Windows; I don't want to use this solution to login into Windows machines
- API to other services that need authentication, such as Redmine or Alfresco
- Simple management
Tried OpenLDAP, but it seems too complicated for my small network. Then I've installed RedHat's IdM (=FreeIPA), which was easy to install, and very nice to administer. It's also based on LDAP, so I thought that it'd play nice with the other players.
Surprisingly, it seems that IdM/FreeIPA doesn't integrate well with Samba. Furthermore, it appears that I was mistaken, and IdM/FreeIPA doesn't expose its LDAP database to other services - they have to be Kerberized, which complicates the business...
So, the reasonable solution appears to be back to LDAP. Am I correct?
But even with LDAP, I'm not sure what's the correct approach...
- OpenLDAP/389 Server
- Samba3 with LDAP backend, or Samba4 with builtin LDAP
I'm not even sure that I'm asking the right question :)