[clug] central auth for Linux only network?

[Chris Smart]

2009/8/4 Robert Edwards <bob at cs.anu.edu.au>:
>
> We have been using (open)LDAP with PAM for many years on most of our
> systems at ANU Comp. Sci.

Hey Bob,

This seems the way to go. Are you using the default POSIX schemas
which come with OpenLDAP?

>
> For wireless VPN users, we use PPTP authenticating using Windows NT
> domain logins to winbind (thanks tpot and abartlett!) which backends
> onto the LDAP server (I know you asked about Linux-only, but even
> the Linux laptops use this...).

So this means you are mapping the Samba schemas with your POSIX schemas?

>
> And, as you would know if you'd come to my PSIG presentation on my
> yubikey server..., that also supports the LDAP bind method so that
> systems needing one-time password (OTP) can also authenticate using
> LDAP...
>

So many things to play with, so little time..

-c