I'm beginning to tire of maintaining individual system files on my increasing number of Solaris servers (was 2, now 10 and growing strong). I'm looking at the Sun Java Directory Server as a non NIS/NIS+ solution.

We run a predominantly Windows shop here, and so I'm also toying with one of two things:

  1. Using Kerberos auth directly from the Solaris clients to AD (with appropriate utilities on the domain controllers), or
  2. Using the Directory Server and using their identity sync product to sync to the Windows domain

At this point I'm leaning more toward #2 because I only need to muck with AD if I (or the user community) want to share credentials between servers.

Any insight or horror stories are appreciated.

4 Answers 4


You can work with a BigAdmin article

Using Kerberos to Authenticate a Solaris 10 OS LDAP Client With Microsoft Active Directory

There is a little disclaimer on the page but it's like ntfs-3g. If it works and is useful, go for it.

  • Thanks, I've read that (twice, actually), but what I'm trying to determine is if I get better mileage from a Sun LDAP server that communicates with AD and authenticates non-Windows clients, or if I just have non-Windows clients use LDAP and Kerberos to authenticate directly to AD.
    – Milner
    May 4, 2009 at 12:48
  • Decided that getting clients to connect to AD is less overhead at this point, so I'm going to head down that route. Thanks!
    – Milner
    May 11, 2009 at 15:23

I might also suggest you take a look at LikeWise Open. http://www.likewise.com/products/likewise_open/index.php

I use it on roughly 18 Solaris 9 and 10 servers, and another 30-40 Linux servers. Its works fantastically, with very little issues in my environment.

  • I'd not seen Likewise Open before, so I'll check it out. Thanks for the link, it looks intriguing!
    – Milner
    May 4, 2009 at 12:49

Take a look at Centrify's DirectControl product.


We use Vintella Authentication System to authenticate/authorize users on 2000+ Solaris/Linux hosts against AD. Hope this helps.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .