Re: Something about Lotus Domino and (Open)LDAP

["Michael Fuller" <fullerms@hotmail.com>]

Hi all,

> I'll run 4 samba-domain-controllers with LDAP-authentification, also web-,
ftp-
> and ssh-authentification on different servers, and smtp/pop/imap
> authentification on the mailserver. I think it would be best, to use
Domino only
> as source for LDAP-replication, and local LDAP-Servers each
domain-controller.

True. I considered integrating Domino Authentication with Windows and using
a setup as mentioned above. But, that will get me into Windows licensing
issues. Now, I am using the Domino address book to authenticate users, so i
dont have to buy a Windows server CAL for every mail user. But If I
integrate Domino authentication with Window accounts, each mail user in
effect becomes a Windows user, involving CAL costs which my budget will not
permit.

Is it possible to integrate Domino on Linux platform with Linux
authentication ? That way all my mail users will be Linux users, and there
will be no CALs involved.

Thanks and regards,
Michael Fuller

----- Original Message -----
From: "Markus Schabel" <markus.schabel@tgm.ac.at>
To: <openldap-software@OpenLDAP.org>
Cc: "Michael Fuller" <fullerms@hotmail.com>; "Jan-Piet Mens"
<jpm@Retail-SC.com>
Sent: Thursday, June 06, 2002 12:54 PM
Subject: Re: Something about Lotus Domino and (Open)LDAP


>
> ----- Original Message -----
> From: "Michael Fuller" <fullerms@hotmail.com>
> To: "Jan-Piet Mens" <jpm@Retail-SC.com>
> Cc: <openldap-software@OpenLDAP.org>
> Sent: Thursday, June 06, 2002 9:11 AM
> Subject: Re: Something about Lotus Domino and (Open)LDAP
>
>
> > Hi all,
> >
> > > Why ? Why don't you just use the Domino LDAP task for authentication,
i.e.
> > point
> > > your freeradius and Squid to the hostname of the Domino server ? It'll
> > save you
> > > headaches...
> >
> > True, but my Domino server will be hit with radius and squid
authentication
> > requests also. I would like to move that part to a different server.
> > Moreover, my domino server will become a single point of failure for all
> > network services. AND, budgets dictate that I cannot install another
domino
> > server with LDAP services.
>
> I'll run 4 samba-domain-controllers with LDAP-authentification, also web-,
ftp-
> and ssh-authentification on different servers, and smtp/pop/imap
> authentification on the mailserver. I think it would be best, to use
Domino only
> as source for LDAP-replication, and local LDAP-Servers each
domain-controller.
>
> Markus
>
> > If I can replicate from Domino it would serve my purpose. Or better
still,
> > if I can populate my domino addres book through LDAP, nothing like it.
> >
> > Regards and thanks in advance,
> > Michael Fuller
> >
> > ----- Original Message -----
> > From: "Jan-Piet Mens" <jpm@Retail-SC.com>
> > To: "Michael Fuller" <fullerms@hotmail.com>
> > Cc: <openldap-software@OpenLDAP.org>
> > Sent: Thursday, June 06, 2002 12:15 PM
> > Subject: Re: Something about Lotus Domino and (Open)LDAP
> >
> >
> > > On Thu, 6 Jun 2002, Michael Fuller wrote:
> > >
> > > > A related question here. I have a Domino Server Version 4.6
installed on
> > > > windows NT 4.0.
> > >
> > > My answers are based on R5 but they could apply to 4.6 as well; I
don't
> > know.
> > >
> > > > This is my requirement:
> > > >
> > > > 1.  I want to replicate the user database to OpenLdap on Red Hat 7.3
for
> > use
> > > > with freeradius and squid proxy for           authentication and
> > > > authorisation..
> > >
> > > Why ? Why don't you just use the Domino LDAP task for authentication,
i.e.
> > point
> > > your freeradius and Squid to the hostname of the Domino server ? It'll
> > save you
> > > headaches...
> > >
> > > ...
> > > > 4.  I need to give the users access to change their passwords.
> > >
> > > No problem. If a user has bound to Domino correctly, she can change
the
> > > userpassword attribute which sets the Internet password in the Domino
> > directory (NAB).
> > >
> > >
> > >
> > >
> >
>
>
>