I have multiple CENTOS
servers that are all currently working off of a local /etc/passwd
for user account control and have local home folders etc.
This makes it a pain when users come on board leave etc since I have to log into each server to control the users. We currently have a 2008 AD domain and would like to leverage it to enable SSO
(single signon across all servers).
I would like to allow only specific users access to log into the linux servers and would like to be able to maintain local system accounts etc on the linux boxes. The users currently have the same firstname.lastname usernames in both linux and AD.
I have found many different guides but it seems that everyone has a different way of doing it and none seem to work very well.
Can someone please offer me an up to date guide that works good with 2008 (I should point out that samba etc works now with 2008 in the latest versions)
- Will I have to remove the local user accounts?
- I take it they will get new home folders (it would be nice to keep their old ones but not a big deal) if they could access home folders through a windows share etc that would be cool.
- Do I have to do any configuration changes on my 2008 AD servers?