[KLUG Members] Managing AD from Linux?

[Adam Tauno Williams]

> I have ldaps: (SSL-636) working on AD, and can connect to it from
> Evolution.  Searches work, but I can't save anything.  All boxes in the
> EV contact properties seem to be read-only, and the OK button is not
> active. (yes, I'm connecting as a user/admin with permissions to change)
> Any suggestions on a Linux package to manage users on a AD server?

What type of bind are you performing?  I recall something about AD
limiting the privileges of simple binds (where you provide a DN and a
secret).  Try a DIGEST-MD5 bind, if that doesn't work your going to have
to try GSSAPI (Kerberos).  The Samba Guide has information on joining a
UNIX/LINUX system with MIT to an AD domian.

You may want to look at -
http://www.educause.edu/ir/library/powerpoint/nmd0311.pps
 - it isn't a 100% solution since they use Netscape LDAP but does
provide allot of information.  And you'd get UNIX kerberos as a side
benefit.  Perhaps there connector works with the Fedora LDAP server?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.kalamazoolinux.org/pipermail/members/attachments/20051229/063b2729/attachment.bin