I've never done this, but given a short google search, it seems possible.

http://www.windowsnetworking.com/articles_tutorials/Authenticating-Linux-Active-Directory.html

http://www.redbooks.ibm.com/abstracts/sg247165.html?Open

The above IBM redbook seems to have much of the information you would need. Since ADS does indeed use Kerberos as its underlying authentication, it should be possible to verify user names through the ADS domain.


- Donald Tripp
 [log in to unmask]
----------------------------------------------
HPC Systems Administrator
High Performance Computing Center
University of Hawai'i at Hilo
200 W. Kawili Street
Hilo,   Hawaii   96720
http://www.hpc.uhh.hawaii.edu

----- Original Message -----
From: "Michael H. Semcheski" <[log in to unmask]>
Date: Wednesday, July 18, 2007 8:20 am
Subject: Authentication with Active Directory
To: Scientific Linux <[log in to unmask]>

> Hello,
> 
> My University uses Active Directory.  I use Linux.
> 
> I would like my SL server to use the active directory to determine
> which usernames are valid for things like logins.
> 
> I'm already using the University's Kerberos infrastructure to verify
> passwords, but I have to make sure the user names are in /etc/passwd.
> I'd like to not have to add the users to /etc/password.
> 
> It would be even better if I could get group information from Active
> Directory, but I can probably live without it.
> 
> Anyone know if this is possible?  Know what needs to go into the
> setup, or know of a good howto?
>