[Beowulf] Linux cluster authenticating against multiple Active Directory domains

[Chris Samuel]

----- "Huw Lynes" <lynesh at cardiff.ac.uk> wrote:

Bore da Huw,
 
> Funnily enough we used to do something similar here. Falling through
> from the main campus LDAP (on an e-directory cluster) to the LDAP in
> Computer Science.

Do you have clashes in user names between the two LDAPs ?  If
so, how do you deal with that ?

> It required some patches to nss_ldap to make it work properly and the
> pam config was a little bit tricky, but it did work. 

Yeah, we'd looked at some of the NSS stuff and realised it
would need patching.. :-(

> I still have that config up and running on some of my older
> machines so I can hunt down the config and patches if it
> would be useful.

That would be awesome, if nothing else it would tell
us how feasible it's going to be for this system!

Diolch yn fawr,
Chris
-- 
Christopher Samuel - (03) 9925 4751 - Systems Manager
 The Victorian Partnership for Advanced Computing
 P.O. Box 201, Carlton South, VIC 3053, Australia
VPAC is a not-for-profit Registered Research Agency