|Lucid| Posted July 10, 2009 Report Share Posted July 10, 2009 Anyone here have any experience with Ubuntu 8 server? Specifically intgrating it into a Microsoft domain environment using OpenLDAP? I am getting ready to upgrade my home linux box which currently runs SUSE 11. I have been strongly considering switching to Ubuntu since I have had many friends recommend it to me. The question I have is: Getting my Suse box to authenticate over the MS domain was a real pain in the ass.. Anybody have any experience with this, and if so, have they streamlined the process any? Part of my problem with Suse was documentation (german distro)... Which is why I am hoping a switch to Ubuntu will help smooth things over some... From reading the forums it seems many people still struggle with OpenLDAP, but maybe they are simply Linux challenged. My linux server handles my email, web and FTP daemons (yes I know I am a total geek). Anyone? Link to comment Share on other sites More sharing options...
|Elflocko| Posted July 10, 2009 Report Share Posted July 10, 2009 Might want to consider WinBind instead of LDAP... [url="https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto"]https://help.ubuntu.com/community/ActiveDir...oryWinbindHowto[/url] Link to comment Share on other sites More sharing options...
|Elflocko| Posted July 10, 2009 Report Share Posted July 10, 2009 But yeah, Ubuntu is a better way to go: [url="http://www.google.com/cse?cx=003883529982892832976%3Ae2vwumte3fq&ie=UTF-8&q=Active+Directory&sa=Search"]http://www.google.com/cse?cx=0038835299828...y&sa=Search[/url] It's still not "easy" per say, but still much improved from the old days. You'd think that Suse (AKA Novell) would do a little better job of integrating with AD as they've been sucking Bill and Ballmer off for a few years now... Link to comment Share on other sites More sharing options...
|Lucid| Posted July 10, 2009 Author Report Share Posted July 10, 2009 [quote name='Elflocko' post='784680' date='Jul 10 2009, 06:28 PM']Might want to consider WinBind instead of LDAP... [url="https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto"]https://help.ubuntu.com/community/ActiveDir...oryWinbindHowto[/url][/quote] Yeah.. That is what I used to get my SuSE box working (OpenLDAP was useless to me at the time, couldn't get it working).. But it was a real goat screw and it still takes almost 20 seconds to authenticate a user. Perhaps they have made advancements to winbind? Have you done this? (hmmm, the process looks vaguely familiar).... I will be fine with it being a goat screw, but going through all the work and having the slow token exchange is maddening. Link to comment Share on other sites More sharing options...
|Lucid| Posted July 10, 2009 Author Report Share Posted July 10, 2009 [quote name='Elflocko' post='784681' date='Jul 10 2009, 06:33 PM']But yeah, Ubuntu is a better way to go: [url="http://www.google.com/cse?cx=003883529982892832976%3Ae2vwumte3fq&ie=UTF-8&q=Active+Directory&sa=Search"]http://www.google.com/cse?cx=0038835299828...y&sa=Search[/url] It's still not "easy" per say, but still much improved from the old days. You'd think that Suse (AKA Novell) would do a little better job of integrating with AD as they've been sucking Bill and Ballmer off for a few years now...[/quote] Yeah, I guess if I wanted easy I probably wouldn't mess with Linux in the first place... But it's my mini everest I get to stand at the top of and pump my fist. I love it. Thanks for the input.. I will probably load it up tonight and have a gander. Link to comment Share on other sites More sharing options...
|Elflocko| Posted July 10, 2009 Report Share Posted July 10, 2009 [quote name='Lucid' post='784683' date='Jul 10 2009, 05:36 PM']Yeah.. That is what I used to get my SuSE box working (OpenLDAP was useless to me at the time, couldn't get it working).. But it was a real goat screw and it still takes almost 20 seconds to authenticate a user. Perhaps they have made advancements to winbind? Have you done this? (hmmm, the process looks vaguely familiar).... I will be fine with it being a goat screw, but going through all the work and having the slow token exchange is maddening. [/quote] Not in years. Plus, my main goal in life is to get people to replace MS, not get it to work with OSS. But that's just me. More important is what version of Server are you using? 2000, 2003, or 2008. Server 2000 is fucking impossible, 2003 is an improvement but slow and 2008 from the little I've been able to use it has some of the best integration I've seen. In regard to integrating *NIX into the environment that is... Link to comment Share on other sites More sharing options...
|Lucid| Posted July 10, 2009 Author Report Share Posted July 10, 2009 [quote name='Elflocko' post='784685' date='Jul 10 2009, 06:44 PM']Not in years. Plus, my main goal in life is to get people to replace MS, not get it to work with OSS. But that's just me. More important is what version of Server are you using? 2000, 2003, or 2008. Server 2000 is fucking impossible, 2003 is an improvement but slow and 2008 from the little I've been able to use it has some of the best integration I've seen. In regard to integrating *NIX into the environment that is...[/quote] 2003 server... Maybe that is why it is so slow (and here I am blaming the linux box... silly me). I would eliminate MS all together but my home domain is sort of like my living breathing resume.... People think I am crazy with my coorporate home computing environment... For employers, it's the right kind of crazy... "Holy shit this guy does this shit for fun!" (I really do by the way) Works every time. Link to comment Share on other sites More sharing options...
|Elflocko| Posted July 10, 2009 Report Share Posted July 10, 2009 [quote name='Lucid' post='784688' date='Jul 10 2009, 05:49 PM']2003 server... Maybe that is why it is so slow (and here I am blaming the linux box... silly me). I would eliminate MS all together but my home domain is sort of like my living breathing resume.... People think I am crazy with my coorporate home computing environment... For employers, it's the right kind of crazy... "Holy shit this guy does this shit for fun!" (I really do by the way) Works every time.[/quote] Well, Linux isn't blameless either. You've got two systems speaking in two different languages translating some pretty tricky security algorithms betwixt the two (kerberos, PAM) as wells as the SMB shares, sysvol, blah blah blah. It's just that M$ didn't even make an effort towards compatibility until 2008. Or I just got lucky... Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.