Hi,

How to synchronize solaris user password with MS active directory?


Thanks in advance.

Dolphin <yc282004@yahoo.com.sg> wrote:
> How to synchronize solaris user password with MS active directory?

In what direction?  Which is authoritative?

Assuming AD is the main password store, then AD will function as a perfectly
usable Kerberos 5 server.  I would investigate simply joining your Solaris
box to the domain using Kerberos.

-- 
Brandon Hume    - hume -> BOFH.Ca, http://WWW.BOFH.Ca/

On Jun 25, 9:09=A0pm, hume.spamfil...@bofh.ca wrote:
> Dolphin <yc282...@yahoo.com.sg> wrote:
> > How to synchronize solaris user password with MS active directory?
>
> In what direction? =A0Which is authoritative?
>
> Assuming AD is the main password store, then AD will function as a perfec=
tly
> usable Kerberos 5 server. =A0I would investigate simply joining your Sola=
ris
> box to the domain using Kerberos.
>
> --
> Brandon Hume =A0 =A0- hume -> BOFH.Ca,http://WWW.BOFH.Ca/

Yes, AD is the main password store. How to join Solaris box to the
domain using Kerberos? Is this the only way as I guess is not easy to
set up Kerberros?

On 06/26/10 10:46 AM, Dolphin wrote:
> On Jun 25, 9:09 pm, hume.spamfil...@bofh.ca wrote:
>> Dolphin<yc282...@yahoo.com.sg>  wrote:
>>> How to synchronize solaris user password with MS active directory?
>>
>> In what direction?  Which is authoritative?
>>
>> Assuming AD is the main password store, then AD will function as a perfectly
>> usable Kerberos 5 server.  I would investigate simply joining your Solaris
>> box to the domain using Kerberos.
>
> Yes, AD is the main password store. How to join Solaris box to the
> domain using Kerberos? Is this the only way as I guess is not easy to
> set up Kerberros?

It isn't trivial, but it's well documented.  GIYF.

-- 
Ian Collins

On 2010-06-25 18:46:21 -0400, Dolphin said:

> On Jun 25, 9:09�pm, hume.spamfil...@bofh.ca wrote:
>> Dolphin <yc282...@yahoo.com.sg> wrote:
>>> How to synchronize solaris user password with MS active directory?
>> 
>> In what direction? �Which is authoritative?
>> 
>> Assuming AD is the main password store, then AD will function as a perfectly
>> usable Kerberos 5 server. �I would investigate simply joining your Solaris
>> box to the domain using Kerberos.
>> 
>> --
>> Brandon Hume � �- hume -> BOFH.Ca,http://WWW.BOFH.Ca/
> 
> Yes, AD is the main password store. How to join Solaris box to the
> domain using Kerberos? Is this the only way as I guess is not easy to
> set up Kerberros?


Take a look at this article I wrote; it provides some guidance:

<http://blog.scottlowe.org/2007/04/25/solaris-10-ad-integration-version-3/>

There are also a few other AD integration articles on the site that 
might be helpful as well. Good luck!

-- 
Scott Lowe
Author, "Mastering VMware vSphere 4" and "VMware vSphere 4 
Administration Instant Reference"
http://blog.scottlowe.org