Windows Security and Directory Services for UNIX v1.0

Brief Description

Technical and process guidance for consolidating security and directory services to provide authentication and authorization in heterogeneous UNIX and Windows environments using Windows Server 2003.

Overview

This guide provides prescriptive guidance on enabling Microsoft® Windows Server™ 2003 to be used for authentication and as an identity store within heterogeneous Microsoft Windows® and UNIX environments. Windows uses the standards-based security and directory services provided by LDAP and Kerberos to provide secure and single sign-on capabilities between Windows, UNIX, and Linux systems.

The guidance covers evaluating, planning, building, deploying, and operating a security and directory infrastructure based on Windows Server 2003. It includes configuring both the Windows and UNIX/Linux settings and configuring the requisite Windows services. Technical guidance has been thoroughly lab tested with Windows Server 2003 SP1, Red Hat Linux 9, and Sun Microsystems Solaris 9.

Alternative solutions leading to two distinct end states are described within the following guide structure:

Volume 1: Overview and Envisioning. Provides an overview of authentication and authorization technologies and guides users through process of determining which of the five end states is most appropriate for their organization.
Volume 2: Solutions Using Kerberos Authentication (End States 1 and 2). Describes implementation of End States 1 and 2 using different technology approaches. In End State 1, UNIX clients use Active Directory Kerberos for authentication but continue to use an existing UNIX-based data store for authorization. In End State 2, UNIX clients use Active Directory Kerberos for authentication and Active Directory LDAP for authorization.

Note Plans for the development of Volumes 3 and 4, referenced in Volume 1 and planned to describe the implementation of three additional end states, have been cancelled. This message supersedes all other messages, including messages in Volume 1, regarding pending availability of these volumes.

Also included in the download package are several Word templates that can be used to create planning documents and other project deliverables and Excel tools that facilitate the identification and management of project risks and the selection of the most appropriate end state.

To view this solution online at TechNet click here.

Send questions or feedback to us directly at CISfdbk@microsoft.com

Top of page

System Requirements

Supported Operating Systems: Linux; Solaris; Windows 2000; Windows 2000 Service Pack 2; Windows 2000 Service Pack 3; Windows 2000 Service Pack 4; Windows Server 2003; Windows Server 2003 R2 (32-Bit x86); Windows Server 2003 Service Pack 1

Adobe Acrobat Reader is required to view PDF files.

Microsoft Word or Microsoft Word Viewer 2003 (available as a free download) can be used to view Word documents.

Microsoft Excel 2003 is required to use the Excel tools.

Top of page

Instructions

Click the Download button at the top of the page to start the download.

Do one of the following:

To start the .zip file extraction immediately, click Open or Run this program from its current location. Then extract the files to your preferred location on your computer.

To save the download to your preferred location on your computer for .zip file extraction at a later time, click Save or Save this program to disk.

To install the tools and templates .msi package

Navigate to where you extracted the .zip file content on your hard drive.

To launch the installer, double-click the Tools and Templates .msi file.

Accept the Microsoft Software License Terms.

Follow the steps in the installation process to complete the installation.

Find the installed files in your My Documents folder or by looking in the Start/All Programs menu for a shortcut.

Top of page

Additional Information

Solution Accelerators are free, scenario-based guides and automations designed to help IT Professionals who are proactively planning, deploying, and operating IT systems using Microsoft products and technologies. Solution Accelerator scenarios focus on security and compliance, management and infrastructure, and communication and collaboration.

More Information about the Solution Accelerator Notifications Newsletter

Register to receive the Solution Accelerator Notifications newsletter so that you can stay informed about new Solution Accelerator releases and updates. The newsletter covers such areas of interest as

Communication & Collaboration
Security, Data Protection, & Recovery
Deployment
Operations & Management

You may also receive invitations to participate in accelerator development via beta programs and customer surveys. Solution Accelerator Notifications is currently available in English only.

Top of page