[OpenIndiana-discuss] Questions about AD integration

[Chris Ridd]

On 7 Mar 2011, at 15:14, Roy Sigurd Karlsbakk wrote:

>>>  - I want to allow users to login to servers on S10, Linux and OI
>>>  using their AD accounts, but this doesn't seem to work. I can't
>>>  find any AD PAM module, and I didn't have much luck with SMB. The
>>>  docs said passwd should create compatible passwords after a change,
>>>  but passwd didn't let me do much:
>> 
>> The integration is not that complete on *solaris.
>> With an AD account, you can connect via the SMB service, but not login
>> locally.
> 
> Are you sure this isn't doable with the LDAP PAM support?

That might work, but it doesn't give you single-sign-on. I would have expected "AD integration" to mean Kerberos, ie pam_krb5.

Chris