Setup centralised authentication (Linux & Windows)

[hfnistelrooy]

Hi guys,

 

Looking for some advice here, I have users who have standalone machines running both linux and windows and use Google Apps for everything, what I want to do is setup a centralised login domain? and merge with Google Apps so that they can login using their current Google credentials.

 

Now I think i could setup a Windows domain with Active Directory or is there a linux alternative which will allow both Windows and Linux to authenticate. The 2nd bit is users work from home so they need to be able to login to their laptops without being in the office - can this be done?

 

Thanks

 

* Most computers running Windows 7/8 and Ubuntu/Linux Mint

[CyberNerd]

Active Directory works. Either the MS version or Samba4.

[hfnistelrooy]

Is there anyway that I can authenticate users that are working from home without them connecting to the domain via VPN? Like a local profile? I want those users to be able to be able to login at home

[CyberNerd]

"winbind offline logon = yes"

 

and "cached_login = yes" in /etc/security/pam_winbind.conf

Edited June 12, 2013 by CyberNerd

[jklight]

Seems do able, but lots of testing ahead.

Take a look at:

Google Apps – Active Directory Sync | Patrick Kremer

Google Apps Directory Sync - Google Apps Help

Google Apps Password Sync - Google Apps Help

https://developers.google.com/google-apps/sso/saml_reference_implementation