3 ms·
Windows runs the largest of enterprises. Very few go without at least Active Directory.
by nullindividual 3y ago
Windows runs the largest of enterprises. Very few go without at least Active Directory.
- whalesalad 3y agoFortunately the enterprise IT seems to be slowly waking up to the realization that AD is just LDAP wrapped in a thick layer of (very expensive) Microsoft epoxy and glue. OSS is alive and well in the enterprise!
- nullindividual 3y agoAD is LDAP+Kerberos+mgmt tooling+integrated DNS/DHCP+replication svcs Only Samba implements part of the above. OSS has a way to go, yet. To be clear, AD never has, never was, and is incapable of being “just LDAP”.
- deleted 3y ago[deleted]
- breakwaterlabs 3y agoFirst off, it's primarily kerberos with LDAP frosting. Kerberos is what makes the AD world go round and for much of what happens in windows its purely resting on tickets and the PAC, not LDAP queries. Second, there's a lot of special bits that others do not replicate. For instance shadow rights / MIM / PAM does not to my knowledge have an OSS equivalent. Windows Hello for Business is the only moderately secure take on biometric auth into kerberos that I have heard of. LAPS is the only secure, native LDAP take I have heard for managing root passwords, which fills a big compliance need for a lot of orgs. And there is quite a lot about GPO that works wonderfully when paired with sssd, e.g. access control.