[27581] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Authenticating Windows 2003 users to a central LDAP

daemon@ATHENA.MIT.EDU (preetam R)
Fri Mar 23 07:09:39 2007

Date: Fri, 23 Mar 2007 04:09:18 -0700 (PDT)
From: preetam R <rpreetam2001@yahoo.com>
To: Ahmad Arshad <ahmad.arshad@nyu.edu>
In-Reply-To: <4602AB90.2030203@nyu.edu>
MIME-Version: 1.0
Message-ID: <547498.9515.qm@web62404.mail.re1.yahoo.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi Ahmad,

    FYI: The Domain Controller itself contains a LDAP
server.

Thanks,
Preetam

--- Ahmad Arshad <ahmad.arshad@nyu.edu> wrote:

> Hi,
> 
> I am not sure if this is the proper list for this...
> but any help would 
> be appreciated...
> 
> We are running a Windows 2003 R2 server whose domain
> is used for user 
> and workstation authentication for a portion of the
> university 
> population. We wanted to tie this domain lets call
> it systems.private 
> into the university wide ldap server lets call is
> ldap.nyu.edu which 
> stores university wide usernames/passwords etc.
> 
> This way users who are part of the domain (remember
> we only want users 
> who are part of the domain to have access) would be
> able to login to the 
> domain.. using their IDs and passwords provided by
> the university.
> 
> I am not sure if this makes any sense...
> 
> so to recap
> 
> a) User tries to log into the domain with his id and
> password.
> b) The domain controller checks to see if the user
> id is in its database.
> c) if it is, it forwards the credential to the ldap
> server for 
> authentication.
> d) if the ldap authenticates, the user is allowed to
> login...
> 
> Any help would be greatly appreciated..
> 
> Sincerely,
> 
> Ahmad S Arshad
> 
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 



 
____________________________________________________________________________________
We won't tell. Get more on shows you hate to love 
(and love to hate): Yahoo! TV's Guilty Pleasures list.
http://tv.yahoo.com/collections/265 
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post