Background Information For Linux Ad Support - Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual

Accessing and Manipulating User Data on the Windows Server
Through Nautilus and Konqueror, users are able to access their Windows user data
and can edit, create, and delete files and folders on the Windows server. Users can
access their data without having to enter their password again and again.
Offline Authentication
Users are able to log in and access their local data on the Linux machine even if
they are offline (for example, using a laptop) or the AD server is unavailable for
other reasons.
Windows Password Change
This port of AD support in Linux enforces corporate password policies stored in
Active Directory. The display managers and console support password change
messages and accept your input. You can even use the Linux passwd command
to set Windows passwords.
Single-Sign-On through Kerberized Applications
Many applications of both desktops are Kerberos-enabled (kerberized), which
means they can transparently handle authentication for the user without the need
for password reentry at Web servers, proxies, groupware applications, or other lo-
cations.
A brief technical background for most of these features is given in the following section.
For directions for file and printer sharing, refer to the GNOME User Guide (↑GNOME
User Guide) and the KDE User Guide (↑KDE User Guide), where you can learn more
about AD enablement in the GNOME and KDE application worlds.
5.2 Background Information for Linux
Many system components need to interact flawlessly to integrate a Linux client into an
existing Windows Active Directory domain.
Schema"
on the underlying processes of the key events in AD server and client interaction.
48 Security Guide
AD Support
(page 49) highlights the most prominent ones. The following sections focus
Figure 5.1, "Active Directory Authentication