News for hackers. Stuff that matters.
Re:Schools should be using open source software by KronisLV on Monday May 30, 2022 @01:31PM (#31561384)
> Linux still doesn't have anything remotely as capable as Active Directory.

I legitimately want more people to talk about this and to share their experiences. Do people run OpenLDAP? Something like FreeIPA? Maybe 389 Server?

What's the most popular or maybe easiest to use *nix solution for managing lots of accounts and devices, policy etc.? What about solutions for just managing accounts/login information or integrating with self-hosted software of all sorts?

Re:Schools should be using open source software by Spivak on Monday May 30, 2022 @02:50PM (#31562283)
Honestly, the best domain server for Linux is active directory and if you have but a single Windows machine in your school it’s mandatory anyway so unless you’re managing massive fleets to warrant the FreeIPA bridge sssd-ad is more than good enough.
Re:Schools should be using open source software by notesinthefield on Monday May 30, 2022 @05:58PM (#31564075)
Every edu ive worked with using Linux rolls an ubuntu derivative which has for six LTS versions supported easy AD integration. Smaller subsets just use Ansible + AWX but they are typically just manging the basics.
Re:Schools should be using open source software by jandrese on Monday May 30, 2022 @10:41PM (#31565613)
The AD integration on Linux is just getting you login. It doesn't support much local configuration of the endpoints, which is the killer feature of AD. I have also found the AD PAM modules to be a bit fragile. I keep having machines that work for awhile, then suddenly need 5 minutes to log in or simply can't log in at all after some time. It has been kind of frustrating for me. I want to tell people "just use your domain login, it will work", but its a lie too often.