[Samba] Samba AD PDC , LDAP and Single-Sign-On

[Rowland Penny]

On 08/10/15 04:16, Mark Foley wrote:
> I'm very confused. I have a Samba4 AD/DC which works great for Windows
> Authentication with our Windows 7 workstations.
>
> Now, I am trying to implement single-sign-on for our coming-soon Linux workstations.

It might help if you were to explain just what you require from 
single-sign-on ?

Rowland

> All web documentation I've so far found on this references OpenLDAP as the server
> and describes server-side commands such as kadmin and slapd-config to get things
> set up on the server-side (e.g. https://help.ubuntu.com/community/SingleSignOn)
> which don't exist on the Samba4 AD/DC.
>
> Samaba4 apparently has it's own LDAP (Heimdal?) implementation.  Does this mean
> everything should "just work" with LDAP clients and I need do no further
> server-side configuration? Or does it mean, "sorry, you can't do LDAP
> Authentication with Samba4."
>
> Please clarify so I can make some decisions.
>
> btw - the following command *does* work from a Linux client on the network:
>
> ldapsearch -xLLL -H ldap://mail:389 -D "cn=Administrator,CN=Users,dc=HPRS,dc=local" -W -b "dc=HPRS,dc=local"
>
> --Mark
>
>
>