{"id":1517,"date":"2016-09-19T10:14:06","date_gmt":"2016-09-19T08:14:06","guid":{"rendered":"http:\/\/www.identitycosmos.com\/?p=1517"},"modified":"2016-09-19T10:14:06","modified_gmt":"2016-09-19T08:14:06","slug":"migration-de-samba-vers-un-proxy-active-directory","status":"publish","type":"post","link":"https:\/\/identitycosmos.com\/index.php\/2016\/09\/19\/migration-de-samba-vers-un-proxy-active-directory\/","title":{"rendered":"Migration de Samba vers un Proxy Active Directory"},"content":{"rendered":"<p><a href=\"http:\/\/www.identitycosmos.com\/http:\/www.identitycosmos.com\/technique\/migration-de-samba-vers-un-proxy-active-directory\/attachment\/samba_logo\" rel=\"attachment wp-att-1518\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1518\" src=\"http:\/\/www.identitycosmos.com\/wp-content\/uploads\/2016\/09\/samba_logo.png\" alt=\"samba_logo\" width=\"283\" height=\"167\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Les solutions de Active Directory Bridge proposent g\u00e9n\u00e9ralement une int\u00e9gration avec Samba, permettant notamment une configuration automatis\u00e9e des param\u00e8tres Winbind et des param\u00e8tres nsswitch.conf li\u00e9s \u00e0 Winbind. Ainsi le mapping des utilisateurs peut se faire avec des comptes utilisateurs Active Directory et non pas avec des comptes utilisateurs locaux au syst\u00e8me UNIX\/Linux. Certaines solutions, telle que Centrify, propose une int\u00e9gration encore plus pouss\u00e9e avec Active Directory permettant en quelques clics un int\u00e9gration de l&#8217;authentification kerberos sur Samba et en fournissant des GPOs pour param\u00e9trer les d\u00e9tails de la configuration Samba sur les diff\u00e9rents serveurs Samba &#8211; mais le revers de la m\u00e9daille est qu&#8217;il faut alors utiliser les package Samba fournis par Centrify.<\/p>\n<p>Depuis peu, Centrify propose de remplacer leur distribution Samba sp\u00e9cifique par une fonction &#8220;ADbindproxy&#8221;. ce nouveau service &#8220;centrifydc-samba&#8221; permet d&#8217;utiliser les packages standards fournis par le syst\u00e8me d&#8217;exploitation (en version samba 4 n\u00e9anmoins) et de relier le service Samba standard avec une zone d&#8217;utilisateurs cr\u00e9\u00e9es dans Active Directory en gardant tous les avantages de ce type de configuration: int\u00e9gration kerberos, mot de passe unique, etc&#8230;<\/p>\n<p>Une vid\u00e9o de pr\u00e9sentation courte (15 minutes) permet de mieux comprendre le fonctionnement de ce nouveau composant:<\/p>\n<p>&nbsp;<\/p>\n<p><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/SGB5vT5Xngk\" width=\"448\" height=\"252\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp;<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,7],"tags":[14,124,132,193,209],"class_list":["post-1517","post","type-post","status-publish","format-standard","hentry","category-centrify","category-technique","tag-active-directory","tag-interoperabilite","tag-kerberos","tag-proxy","tag-samba"],"_links":{"self":[{"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/posts\/1517","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/comments?post=1517"}],"version-history":[{"count":0,"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/posts\/1517\/revisions"}],"wp:attachment":[{"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/media?parent=1517"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/categories?post=1517"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/identitycosmos.com\/index.php\/wp-json\/wp\/v2\/tags?post=1517"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}