W
W
Wadik_Wadkovich2018-03-12 17:53:52
linux
Wadik_Wadkovich, 2018-03-12 17:53:52

What are ldap, kerberos, winbind and sssd responsible for and what are they for?

Please explain in simple terms why they are needed and what they are responsible for: ldap, kerberos, winbind, sssd? I tried to figure it out myself, but in the end I got completely confused.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
C
CityCat4, 2018-03-12
@Wadik_Wadkovich

LDAP - lightweight directory access protocol, a lightweight directory access protocol, as well as a service of the same name. Provides access to a specialized database that can store anything, but usually stores credentials for users, computers, etc. Active Directory is the essence of LDAP, it can be picked up by a regular LDAP browser and even scripts.
Kerberos is a network authentication protocol. It is very widely used both in AD and in other services, which may or may not be associated with AD. For authentication in AD, it is widely used by squid and apache. Essential for samba
winbind- a local copy of AD, formed by samba for the purpose of authentication of domain users. It is needed so that you can use domain user accounts in exactly the same way as local accounts - distribute rights, restrict access, create homework. Required component of the mail server.
sssd is an alternative to winbind that does not require samba, adcli will suffice. Does everything the same, except you don't need to install samba, which has been incredibly fat lately.

S
Stanislav Bodrov, 2018-03-12
@jenki

what are they for and what are they responsible for: ldap, kerberos , winbind, sssd ?
AAA ( Authentication Authorization and Accounting ) to some extent.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question