From: Dolphin on
Hi,

How to synchronize solaris user password with MS active directory?


Thanks in advance.
From: hume.spamfilter on
Dolphin <yc282004(a)yahoo.com.sg> wrote:
> How to synchronize solaris user password with MS active directory?

In what direction? Which is authoritative?

Assuming AD is the main password store, then AD will function as a perfectly
usable Kerberos 5 server. I would investigate simply joining your Solaris
box to the domain using Kerberos.

--
Brandon Hume - hume -> BOFH.Ca, http://WWW.BOFH.Ca/
From: Dolphin on
On Jun 25, 9:09 pm, hume.spamfil...(a)bofh.ca wrote:
> Dolphin <yc282...(a)yahoo.com.sg> wrote:
> > How to synchronize solaris user password with MS active directory?
>
> In what direction?  Which is authoritative?
>
> Assuming AD is the main password store, then AD will function as a perfectly
> usable Kerberos 5 server.  I would investigate simply joining your Solaris
> box to the domain using Kerberos.
>
> --
> Brandon Hume    - hume -> BOFH.Ca,http://WWW.BOFH.Ca/

Yes, AD is the main password store. How to join Solaris box to the
domain using Kerberos? Is this the only way as I guess is not easy to
set up Kerberros?
From: Ian Collins on
On 06/26/10 10:46 AM, Dolphin wrote:
> On Jun 25, 9:09 pm, hume.spamfil...(a)bofh.ca wrote:
>> Dolphin<yc282...(a)yahoo.com.sg> wrote:
>>> How to synchronize solaris user password with MS active directory?
>>
>> In what direction? Which is authoritative?
>>
>> Assuming AD is the main password store, then AD will function as a perfectly
>> usable Kerberos 5 server. I would investigate simply joining your Solaris
>> box to the domain using Kerberos.
>
> Yes, AD is the main password store. How to join Solaris box to the
> domain using Kerberos? Is this the only way as I guess is not easy to
> set up Kerberros?

It isn't trivial, but it's well documented. GIYF.

--
Ian Collins
From: Scott Lowe on
On 2010-06-25 18:46:21 -0400, Dolphin said:

> On Jun 25, 9:09�pm, hume.spamfil...(a)bofh.ca wrote:
>> Dolphin <yc282...(a)yahoo.com.sg> wrote:
>>> How to synchronize solaris user password with MS active directory?
>>
>> In what direction? �Which is authoritative?
>>
>> Assuming AD is the main password store, then AD will function as a perfectly
>> usable Kerberos 5 server. �I would investigate simply joining your Solaris
>> box to the domain using Kerberos.
>>
>> --
>> Brandon Hume � �- hume -> BOFH.Ca,http://WWW.BOFH.Ca/
>
> Yes, AD is the main password store. How to join Solaris box to the
> domain using Kerberos? Is this the only way as I guess is not easy to
> set up Kerberros?


Take a look at this article I wrote; it provides some guidance:

<http://blog.scottlowe.org/2007/04/25/solaris-10-ad-integration-version-3/>

There are also a few other AD integration articles on the site that
might be helpful as well. Good luck!

--
Scott Lowe
Author, "Mastering VMware vSphere 4" and "VMware vSphere 4
Administration Instant Reference"
http://blog.scottlowe.org