3 ms·
Plus one for pGina, a really nice piece of software, login auth on your LDAP, then script mounts of drive if any and you avoid having a full Active Directory.
by guerby 6y ago
Plus one for pGina, a really nice piece of software, login auth on your LDAP, then script mounts of drive if any and you avoid having a full Active Directory.
I was listening at a conference call about security in my area of work and someone said that 100% of the pen-tests done in the past year on various entities got full control of the Active Directory.
At the conference call I mentionned that we do without AD and with pGina, the senior security officer said it was not a bad idea when possible :).
- nineteen999 6y agoYeah a full AD doesn't make sense for us, as we only have a handful of Windows VM's and the rest is Linux. But if you're running an environment with 100's or 1000's of Windows desktops/servers you're probably stuck with AD if you want to be able to manage that lot.