Novell LINUX ENTERPRISE DESKTOP 10 SP2 - DEPLOYMENT GUIDE 08-05-2008 Deployment Manual page 321

Figure 12.1 Active Directory Authentication Schema
PAM aware applications
(gdm, kdm, login)
NSS
nscd
nss_compat nss_winbind
Offline Cache winbindd
Windows DC
(Active Directory)
To communicate with the directory service, the client needs to share at least two proto-
cols with the server:
LDAP
LDAP is a protocol optimized for managing directory information. A Windows
domain controller with AD can use the LDAP protocol to exchange directory infor-
mation with the clients. To learn more about LDAP in general and about the open
source port of it, OpenLDAP, refer to
(page 671).
PAM
Kerberos
Credential
pam_winbind Cache
pam_unix2
pam_mkhomedir
Chapter 35, LDAP—A Directory Service
kerberized
apps
Active Directory Support 305