Recently, I've been doing a lot of research into Active Directory. So far, everything on our domain controller can be handled by a linux box, which saves my company a lot of money, not to mention gives me a lot more flexibility. The problem is Active Directory, I cannot replace. Or at least, I have not found a good enough solution to. What we need from AD is the ability for a list of users to sign in to any machine, with the same sign on, which from what I understand LDAP and Kerberos can handle. But I have not gotten to happily work. I managed to get FreeIPA to work with Kerberos tickets...but that doesn't help when they initially sign in. Any suggestions?
[link] [comments]