Comments on: Ubuntu Directory Service: Canonical Calls for Help http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/ Channel News, Reseller News and Channel Partner Programs Thu, 09 Feb 2012 18:59:41 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Sushil http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117139 Sushil Sun, 31 May 2009 10:33:43 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117139 Hi, Interesting article, I have been looking around to have a single integrated system for identity management and authentication. Noticed that nobody mentioned node directory. http://nodedirector.bigsister.ch/ It is a slightly heavy interface, but has quite a few features and provides a nice web interface to access LDAP objects. I shall leave it up to you, make the final judgement. Thank you Regards Sushil Suresh. Hi,
Interesting article, I have been looking around to have a single integrated system for identity management and authentication.

Noticed that nobody mentioned node directory.
http://nodedirector.bigsister.ch/

It is a slightly heavy interface, but has quite a few features and provides a nice web interface to access LDAP objects.

I shall leave it up to you, make the final judgement.

Thank you
Regards
Sushil Suresh.

]]> By: Jo Øiongen http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117138 Jo Øiongen Thu, 26 Mar 2009 06:32:11 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117138 Why isn't Canonical, and other Linux distributers, working hard on supporting SAMBA4? SAMBA4 will give native support for Microsofts' protocol. AD is so much more than LDAP. Something one must adjust to when attacking the Microsoft desktop. Anyhow, to embrace, extend and extinguish the Microsoft stronghold on the desktop, one must be able to just drop in an Linux workstation/desktop . And it must JUST WORK. Why isn’t Canonical, and other Linux distributers, working hard on supporting SAMBA4? SAMBA4 will give native support for Microsofts’ protocol. AD is so much more than LDAP. Something one must adjust to when attacking the Microsoft desktop.

Anyhow, to embrace, extend and extinguish the Microsoft stronghold on the desktop, one must be able to just drop in an Linux workstation/desktop . And it must JUST WORK.

]]> By: Ramkaran http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117137 Ramkaran Wed, 11 Mar 2009 22:25:54 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117137 Web SSO functionality with SAML providers could be a killer addition...specially out-of-the-box integration with Google Apps using SAML could be a first step for effective directory service relavent in the SaaS and PaaS model for Application Consumption... My team can help in doing this... Web SSO functionality with SAML providers could be a killer addition…specially out-of-the-box integration with Google Apps using SAML could be a first step for effective directory service relavent in the SaaS and PaaS model for Application Consumption…

My team can help in doing this…

]]> By: Ty Miles http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117136 Ty Miles Mon, 09 Mar 2009 15:57:49 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117136 @ Joe Panettieri: The problem even using edirectory in Novell's small business server is that its a pain to use. To try to get it and Samba working right out of the box is a mess. In Novells set up you get functions to do edirectory management of LDAP and also Samba, but you also have the default functions of those same tasks to do the same functions using Yast. In the end to get it to work you wind up with a mix and match of the two. Not good for administration. Also edirectory is powerful, but not as easy to understand as AD. AD is weaker but strong enough to power a large company (We use it here in the Federal Government) and it's easy to figure out AD. Someone here also mentioned GPO's. GPO's are a key leg up with Windows and AD. To be able to push out security, lock down or unlock down machines etc from a central location with the use of fine grain policies are a powerful tool. @ Joe Panettieri:

The problem even using edirectory in Novell’s small business server is that its a pain to use. To try to get it and Samba working right out of the box is a mess. In Novells set up you get functions to do edirectory management of LDAP and also Samba, but you also have the default functions of those same tasks to do the same functions using Yast. In the end to get it to work you wind up with a mix and match of the two. Not good for administration.

Also edirectory is powerful, but not as easy to understand as AD. AD is weaker but strong enough to power a large company (We use it here in the Federal Government) and it’s easy to figure out AD.

Someone here also mentioned GPO’s. GPO’s are a key leg up with Windows and AD. To be able to push out security, lock down or unlock down machines etc from a central location with the use of fine grain policies are a powerful tool.

]]> By: Ty Miles http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117135 Ty Miles Mon, 09 Mar 2009 15:51:53 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117135 This is what I have been saying 100 times on Ubuntu fourms etc. Ubuntu really needs to make a client server system like Windows XP and 2003 server with AD. I wish someone could track down Banyan and see if they would open source Banyan Vines. It ran on Unix, was full LDAP. Using a client like Novell does you could do file, print and email no problem with Windows and Unix clients! That is what someone like Ubuntu needs. They could really break into the office server market if they could support Linux and Windows machines. Who cares about AD. If they could make their own that could do the functions of AD and their Directory Services could scale like AD then who would need AD (It would have to be as easy as AD though) As far as edirectory, it is a free download and can install on more then Suse linux but its a PAIN to install and a PAIN to admin. If they had an easy interface like AD does and it was easy to install on Red Hat or Ubuntu that would be great. Problem is that its one of the only thing that Novell still makes money on. Take that away and Novell goes away. This is what I have been saying 100 times on Ubuntu fourms etc. Ubuntu really needs to make a client server system like Windows XP and 2003 server with AD.

I wish someone could track down Banyan and see if they would open source Banyan Vines. It ran on Unix, was full LDAP. Using a client like Novell does you could do file, print and email no problem with Windows and Unix clients! That is what someone like Ubuntu needs.

They could really break into the office server market if they could support Linux and Windows machines. Who cares about AD. If they could make their own that could do the functions of AD and their Directory Services could scale like AD then who would need AD (It would have to be as easy as AD though)

As far as edirectory, it is a free download and can install on more then Suse linux but its a PAIN to install and a PAIN to admin. If they had an easy interface like AD does and it was easy to install on Red Hat or Ubuntu that would be great. Problem is that its one of the only thing that Novell still makes money on. Take that away and Novell goes away.

]]> By: Howard Chu http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117134 Howard Chu Fri, 06 Mar 2009 20:50:32 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117134 If there's anything in FreeIPA that requires a particular LDAP server in order to function, then it's doing something non-standard and needs to be fixed. Just because you like the features in FreeIPA, it doesn't follow that you have to switch your base directory server in order to use it. If there’s anything in FreeIPA that requires a particular LDAP server in order to function, then it’s doing something non-standard and needs to be fixed. Just because you like the features in FreeIPA, it doesn’t follow that you have to switch your base directory server in order to use it.

]]> By: Luis http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117133 Luis Fri, 06 Mar 2009 18:39:46 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117133 I think is very important to include policy in any Linux Directory Server . This is the major feature in my opinion in Active Directory because LDAP, Kerberos and DNS not is new in Linux I think is very important to include policy in any Linux Directory Server . This is the major feature in my opinion in Active Directory because LDAP, Kerberos and DNS not is new in Linux

]]> By: Joe Panettieri http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117132 Joe Panettieri Fri, 06 Mar 2009 15:56:48 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117132 Leif: I plan to do a follow-up article on Fedora DS, and Novell has confirmed that they'll give me an update on eDirectory. So stay tuned for an updated directory services article with more perspectives in the next few days. In the meantime, thank you (and other readers who posted comments) for some great ideas on how to push this story forward. Leif: I plan to do a follow-up article on Fedora DS, and Novell has confirmed that they’ll give me an update on eDirectory. So stay tuned for an updated directory services article with more perspectives in the next few days.

In the meantime, thank you (and other readers who posted comments) for some great ideas on how to push this story forward.

]]> By: Leif Hedstrom http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117131 Leif Hedstrom Fri, 06 Mar 2009 15:51:34 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117131 Maybe it's time to consider switching to Fedora DS,and support that development instead? Maybe it’s time to consider switching to Fedora DS,and support that development instead?

]]> By: Joe Panettieri http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117130 Joe Panettieri Fri, 06 Mar 2009 13:19:08 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117130 Zac @5: Yes, I will make sure Canonical sees all of the comments above. Matt @7: Thanks for the eDirectory tip. At the least, you'd think Novell would do some viral marketing on this? I'm checking in with Novell, mainly for an eDirectory briefing for our readers on www.TheVARguy.com. But I will ask if/how eDirectory can discover/manage Ubuntu systems. Zac @5: Yes, I will make sure Canonical sees all of the comments above.

Matt @7: Thanks for the eDirectory tip. At the least, you’d think Novell would do some viral marketing on this? I’m checking in with Novell, mainly for an eDirectory briefing for our readers on http://www.TheVARguy.com. But I will ask if/how eDirectory can discover/manage Ubuntu systems.

]]> By: Matt http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117129 Matt Fri, 06 Mar 2009 10:01:53 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117129 Hey Joe, eDirectory IS free (as in no cost) - you can get a 250,000 object license from Novell here : http://www.novell.com/products/edirectory/customer_license.htm I don't know why Novell doesn't publicise this because it's been available for years - If I recollect we took up this offer in 2002! Typical Novell marketing - they've got what is far and away the best directory service and nobody knows about it. Hey Joe, eDirectory IS free (as in no cost) – you can get a 250,000 object license from Novell here : http://www.novell.com/products/edirectory/customer_license.htm
I don’t know why Novell doesn’t publicise this because it’s been available for years – If I recollect we took up this offer in 2002! Typical Novell marketing – they’ve got what is far and away the best directory service and nobody knows about it.

]]> By: Natxo Asenjo http://www.thevarguy.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/comment-page-1/#comment-117128 Natxo Asenjo Fri, 06 Mar 2009 09:27:50 +0000 http://www.workswithu.com/2009/03/05/ubuntu-directory-service-canonical-calls-for-help/#comment-117128 Instead of calling for help, canonical should be joining the other team that already has a working implementation of this stuff (already mentioned by Gordon Messmer). The freeipa guys have a single sign-on (SSO) multimaster replicated ldap kerberos solution. It works right now (version 1.2.1) for just authentication (or in freeipa parlance, identity). In version 2 (which is expected in april/may this year) there will be a first implementation of policy and auditing. So Canonical, do not request help, go help yourselves and your clients by implementing the next enterprise ready authentication platform for unix :-) Instead of calling for help, canonical should be joining the other team that already has a working implementation of this stuff (already mentioned by Gordon Messmer). The freeipa guys have a single sign-on (SSO) multimaster replicated ldap kerberos solution. It works right now (version 1.2.1) for just authentication (or in freeipa parlance, identity). In version 2 (which is expected in april/may this year) there will be a first implementation of policy and auditing.

So Canonical, do not request help, go help yourselves and your clients by implementing the next enterprise ready authentication platform for unix :-)

]]>