Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 61

Figure 5.1 Active Directory Authentication Schema
PAM aware applications
(gdm, kdm, login)
NSS
nscd
nss_compat nss_winbind
Offline Cache winbindd
Windows DC
(Active Directory)
To communicate with the directory service, the client needs to share at least two proto-
cols with the server:
LDAP
LDAP is a protocol optimized for managing directory information. A Windows
domain controller with AD can use the LDAP protocol to exchange directory infor-
mation with the clients. To learn more about LDAP in general and about the open
source port of it, OpenLDAP, refer to
(page 29).
PAM
Kerberos
Credential
pam_winbind Cache
pam_unix2
pam_mkhomedir
Chapter 4, LDAP—A Directory Service
kerberized
apps
Active Directory Support 49