I am using the Active directory on windows server and LDAP on Ubuntu. I have some client that using ubuntu desktop, I want to integrate LDAP with active directory for authentication and using SSSD group policy management. can I integrate OpenLDAP with active directory?
closed as off-topic by Greg Askew, kasperd, fuero, Ward♦, pacey Oct 5 '18 at 13:04
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Requests for product, service, or learning material recommendations are off-topic because they attract low quality, opinionated and spam answers, and the answers become obsolete quickly. Instead, describe the business problem you are working on, the research you have done, and the steps taken so far to solve it." – Greg Askew, kasperd, fuero, Ward, pacey
The project is called SAMBA, take a look here: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
Simpli use openldap you get some limitations: https://www.itprotoday.com/management-mobility/integrate-active-directory-and-openldap (may you can find some think more recent)
Anyway what seems feet more to your question is this: https://www.freeipa.org/page/About
You can join Linux machines to the AD DS domain directly, without needing to use other LDAP directories. Use realmd to configure sssd relatively easily.
GPOs is a policy system for Windows machines. You will need to implement something else for Linux policy. Possibly commercial GPO for UNIX software, or a different configuration management tool.