Background Information For Linux Ad Support - Novell LINUX ENTERPRISE DESKTOP 10 SP2 - DEPLOYMENT GUIDE 08-05-2008 Deployment Manual

Accessing and Manipulating User Data on the Windows Server
Through Nautilus and Konqueror, users are able to access their Windows user data
and can edit, create, and delete files and folders on the Windows server. Users can
access their data without having to enter their password again and again.
Offline Authentication
Users are able to log in and access their local data on the Linux machine even if
they are offline (for example, using a laptop) or the AD server is unavailable for
other reasons.
Windows Password Change
This port of AD support in Linux enforces corporate password policies stored in
Active Directory. The display managers and console support password change
messages and accept your input. You can even use the Linux passwd command
to set Windows passwords.
Single-Sign-On through Kerberized Applications
Many applications of both desktops are Kerberos-enabled (kerberized), which
means they can transparently handle authentication for the user without the need
for password reentry at Web servers, proxies, groupware applications, or other lo-
cations.
A brief technical background for most of these features is given in the following section.
For directions for file and printer sharing, refer to GNOME User Guide and KDE User
Guide, where you can learn more about AD enablement in the GNOME and KDE ap-
plication worlds.
12.2 Background Information for
Many system components need to interact flawlessly to integrate a Linux client into an
existing Windows Active Directory domain.
cation Schema"
focus on the underlying processes of the key events in AD server and client interaction.
304 Deployment Guide
Linux AD Support
(page 305) highlights the most prominent ones. The following sections
Figure 12.1, "Active Directory Authenti-