Linux Authentication by Active Directory without joining to domain

Question

I have a Win 2008 AD based network. I want to setup a few boxes with dual boot Win/Linux. How can I achieve to authenticate the users with existing AD in Linux?

All solutions - I have found yet - join the linux boxes to the domain. I think, this is a problem in case of dual boot and the same netbios name of the client. Are there possibilities without joining to domain?

The home dir should be on a nfs4 server (linux), so I need kerberos.

Which solutions are possible, which are most stable?

Thanks for any advice!

Sepp Hofbauer

Solution

You can make local accounts in Linux for the users but authenticate from kerberos. When users login to Linux they will get a kerberos ticket from AD. No need to join the domain.

Comments

[Sepp Hofbauer]

It's a school with ca. 1000 users which often change. I wanted to avoid create local users. Is there a solution for auto creation?

[Ian]

In that case you could get account details from ldap and authenticate from kerberos.