secure logins via ldap

hi,

we have several Mac and PC labs on campus. we want to secure the workstations so only people with a valid account on our main unix system can login and get access to a workstation. ideally, we want to authenticate against an ldap server for all the accounts. anyone have any pointers to ideas on how to accomplish this or pointers to third party products that will allow us to to this?

thanks.

osamu
[430 byte] By [osamum] at [2007-11-17 14:26:37]
# 1 Re: secure logins via ldap
Under Windows NT Workstation (and Server) you can write what is known as a 'GINA', which is a plug in of sorts for performing authentications.

Perhaps there is already a commercial GINA, or one from Microsoft, that supports validation against LDAP sources.

V
at 2007-11-10 3:39:26 >
# 2 Re: secure logins via ldap
I think ms site server has an implementation of this
at 2007-11-10 3:40:26 >
# 3 Re: secure logins via ldap
According to TechNet, there are a number of third-party GINAs available.

Check out the following (this is not an endorsement, just telling you what I found):

http://brookland.mech.uwa.edu.au/barney/bookmarks/MSWindows/NT/PasswordcodeNTUNIX/

http://www.microsoft.com/ntserver/security/techdetails/techcomp/nt_unix.asp

http://www.loa.espci.fr/winnt.html

I also checked Site Server and it allows content migration between UNIX and NT. This indicates there's a mechanism for authentication.
Rick Leinecker at 2007-11-10 3:41:25 >