Active Directory Interoperability with Linux and Apple OS X

1. Active Directory Interoperability with Linux and Apple OS X Keith Combs Microsoft US IT Pro Evangelist keith.combs@microsoft.com http://blog.technet.com/keithcombs

2. Agenda • 8:30 - Windows Server 2008 Active Directory (AD) Interop with Linux and OS X • 9:45 - Break • 10:00 - Running Open Source Software (OSS) onWindows Server 2008 • 11:00 - Break • 11:15 - Installing and Using PHP with SQL Server 2008 • 12:15 – Local Event Drawing

3. Mixed IT Environments The ability of these systems towork together, or interoperate, extends – or limits – their business value.

4. Interoperability Keeps Business Running People Interoperability drives Costs down Efficiency up Business forward Processes Information

5. Authentication History • Windows built-in for years • OS X built-in support for Open Directory and AD • Linux originally not built with single authentication in mind • Samba • File and Print Services • Windows Authentication Services • Winbind • Improvement over Kerberos and PAM • Uses DNS locators similar to Microsoft DC LOCATOR

6. How to Authenticate Linux Today • Do it yourself: • Locate and download the appropriate Samba and other dependent components. • Build Samba. • Install and configure Samba. • Configure Linux, specifically PAM and NSS. • Configure Active Directory. • COMPLEX, COMPLEX, COMPLEX • 3rd Party solutions: • Centrify DirectControl, Quest Authorization Mgr , Likewise … etc

7. Resources for do it yourselfers: Read this issue of TechNet Magazine:December 2008 And eat a good breakfast!

8. Let’s Take A Look Active Directory Integration

9. Centralized Management • Group Policy Configuration and Management • Centralized for AD Users and Computers • Linux and MAC can us GPO • Need 3rd Party agents • Usually limited GPO’s compared to Windows Clients • System Center Benefits • Operations Manager 2007 Cross Platform Extensions • Configuration Manager usually through ISV’s

10. Let’s Take A Look Linux and OS X Desktop Management withGroup Policy

11. An Integrated Approach to Achieving Greater Interoperability Products Collaboration ? Deliver interoperability in Microsoft products and technologies Work jointly with partners and competitors to resolve interoperability challenges Standards Developer Resources Promote interoperability through new and existing standards Make it easier to develop products that interoperate with Microsoft solutions Customer Input and Feedback

12. IT Pro Momentum Program A Microsoft program focused on supporting “early adopters” – IT professionals who bet on the newest technologies to drive business value for their companies • Is IT Pro Momentum right for you? • Interested in learning more about the newest Microsoft technologies? • Need help to evaluate different Microsoft products and features? • Willing to test and pilot in production Microsoft beta products? • Would like to have access to exclusive forums and Microsoft product support? • If you answered ‘yes’ for all the questions above, IT Pro Momentum can help! Email keith.combs@microsoft.com for more information

13. Call to Action • See http://microsoft.com/interop/ • Go to http://microsoft.com/windowsserver2008/en/us/try-it.aspx • Evaluation versions of Windows Server 2008 • Evaluation WS 2008 virtual machines • Test Drives and Virtual Labs • Contact Keith.Combs@microsoft.com for the IT Pro Momentum Program • Contact Centrify about DirectControl evaluations

15. Extra references (unused)