1. Winbind as Identity Management Connector
Fabrizio Manfred Furuholmen

2. Agenda
 Overview
 Introduction
 Solution
 Case study
 Results
2
11/05/09

3. Winbind
Winbind unifies UNIX and Windows
NT account management by allowing a
UNIX box to become a full member of
an Windows domain.
 Authenticate user credentials by using PAM
(SSO)
 Resolve user identities and group identities
by using the NSS.
 Store mappings between Unix UIDs and
GIDs and Active Directory security
identifiers, or SIDs
3
11/05/09

4. Windbind vs pam_krb/ldap
4
11/05/09

5. Goal
5
11/05/09

6. Solution guide line
6
11/05/09

7. Solution Components
7
11/05/09

8. Case study
8
11/05/09

9. Architecture HQ
9
11/05/09

10. Architecture Branch
10
11/05/09

11. Winbind connectors
11
11/05/09

12. Winbind configuration 1/5
12
11/05/09

13. Winbind configuration 2/5
13
11/05/09

14. Winbind configuration 3/5
14
11/05/09

15. Winbind configuration 4/5
15
11/05/09

16. Winbind configuration 5/5
16
11/05/09

17. Write your connector
17
11/05/09

18. Performance
Application Cold cache Warm cache Remote cold Remote warm
cache cache
Ldap 2X - 2.5X -
Ldap+ns 2X 1X 2.5X 1X
cd
winbind - - 4X 1.2X
ptserver - - 2X 1X
Value for execution time
18
11/05/09

19. Administration Tasks - Users
unixUserPassword: ABCD!efgh12345$67890
uid: test
msSFU30Name: test
msSFU30NisDomain: beolink
uidNumber: 10000
gidNumber: 10000
unixHomeDirectory: /home/test
loginShell: /bin/sh
19
11/05/09

20. Administration Tasks - Groups
msSFU30Name: Domain Users
msSFU30NisDomain: beolink
gidNumber: 10000
20
11/05/09

21. Administration Tasks - Processes
21
11/05/09

22. Migration

23. Archievements
23
11/05/09

24. Don’t forget..
24
11/05/09

25. Results
25
11/05/09

26. Results
26
11/05/09

27. Werbung
openAFS Conference Rome September 28-30
http://www.dia.uniroma3.it/~afscon09/
27
11/05/09

28. Thank you !
Website: www.beolink.org
Email: manfred@freemails.ch