Linux workstation and Active Directory authentication

Question

I read a few articles regarding "How to Authenticate Linux Clients with Microsoft Active Directory"

My question before I do it: what will happen to Notebooks that try to login when the Active directory server is not available?

It's not an issue with a Windows Notebook, but I don't have a clue regarding Linux. I have Ubuntu and Fedora Notebooks.

score 0 · Answer 1 · answered Jan 02 '13 at 13:19

0

I am note sure if this works for AD as well, but for a plain LDAP server you can use libpam_ccreds (for "cached credentials") to achieve what you want.

This will store the credentials on the system so it still works in disconnected mode.

Here is a tutorial that explains how to use it on Ubuntu.

answered Jan 02 '13 at 13:19

Sven

97,248
13
177
225

I'm just wondering how it will work while you connect AD as LDAP. This may be interesting. – Piotr Kieszczyński Jan 02 '13 at 13:32

score 0 · Answer 2 · answered Jan 02 '13 at 13:31

0

Also when you are connecting to AD using samba/winbind you can also add it in smb.conf

winbind offline logon = yes

Remeber to add cached_login = yes to /etc/security/pam_winbind.conf while you are using winbind offline logon = yes.

answered Jan 02 '13 at 13:31

Piotr Kieszczyński

311
1
8

Please let me know how it goes. – Piotr Kieszczyński Jan 03 '13 at 09:20

Linux workstation and Active Directory authentication

2 Answers2