Synchronizing passwords AIX/Win2K

[csutton]

Hey everyone,

We have recently installed a Windows 2000 Network (with a domain controller). We have a bunch of AIX boxes that we still use, and would like to know if there is a way to synchronize the usernames and passwords.

I know Microsoft has Unix for Windows, was not sure if that is reliable and how well it works. Is LDAP an option? If so, any ideas on how to set this up on AIX ?

Any help would be appreciated.

Thank you,
Chris Sutton

 

[gheist]

i have a kerberos domain, windows hardly interoperates with it, although Win UNIX toolkit can assign drive letters to nfs exports, or samba gives imagination of windows shares but I havent succeeded with windows kerberos support nor tried another ways of common authentification

 

[Yegolev]

We are using RSA, however do not ask me too much about it. We don't have too many people actually logging in at the AIX level so we are able to largely avoid interacting with NT/2k security. I have a W2K laptop (Active Dir, PDC, etc) but connect to the AIX environment with simple telnet. I use PuTTY, actually.

http://www.chiark.greenend.org.uk/~sgtatham/putty/

 

[avadh]

Hello,
Well you just have to administer user id and password on AIX and Win2k. There is no solution to make your life any easier.

No one has software product that will make it easy.

 

[LeDam]

You can use Samba TNG with LDAP support to centralise your administration.
But i think there is no way to synchronise Password.
The authentification for an AIX user can be make trougth a LDAP server.... but Windows..... n

 

[LeDam]

You can use Samba TNG with LDAP support to centralise your administration.
But i think there is no way to synchronise Password.
The authentification for an AIX user can be make directly trougth a LDAP server. But for Windows, you need a PDC or active directory!

 

[InduPramod]

Yes I have tried with latest version of samba. It works with password authenication from AIX/Win2k

 

[LeDam]

But you have not the same password for AIX and Win2000 isn't it???