I need to migrate users from the aforementoned platforms and the ideal situation would be that the users continued to authenticate with the same passwords. Is it doable by just copying the hashes? If not what additional steps should be taken?
Short answer: No, this is not possible.
- Intercept password changes with a DLL installed in the AD domain controllers. Many AD admins do not like this. Also it's slow depending on how long users' password are valid.
- Intercept password authentication in an application where users enter their clear-text passwords. Slightly faster but 100% user coverage is not guaranteed either.
- Force users to go through a password reset process on your RHDS installation.