[B! ActiveDirectory] graceful_lifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

graceful_life id:graceful_life

ActiveDirectoryã«é–¢ã™ã‚‹graceful_lifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Active Directoryã¨ apacheã§ çµ±åˆWindowsèªè¨¼ - ã‚ã ãã†ã ã£ãŸ
ã‚¦ã‚§ãƒ–ã§äº‹ä¾‹ã‚’è¦‹ã‹ã‘ã¦ä»¥æ¥ã€ã‚„ã£ã¦ã¿ãŸã„ã¨è€ƒãˆã¦ã„ãŸã€‚ â†“ã“ã®ãƒšãƒ¼ã‚¸ã‚’è¦‹ã¦ä½•åº¦ã‹ãƒˆãƒ©ã‚¤ã—ã¦ã¿ãŸã‚“ã ã‘ã©ãšãƒ¼ã£ã¨ä¸Šæ‰‹ãã„ã£ã¦ãªã‹ã£ãŸã€‚ using mod_auth_kerb and Windows 2000/2003 as KDC ã‘ã©ã€ã¤ã„ã«è‡ªåˆ†ã¨ã“ã‚ã®ç’°å¢ƒã§å‹•ã„ãŸã®ã§ãƒ¡ãƒ¢ã€‚ æ‰‹é †ã‚„è¨å®šã¯ã»ã¼ä¸Šã®URLã«æ›¸ã„ã¦ã‚ã‚‹ã¨ãŠã‚Šãªã‚“ã ã‘ã©ã€è‡ªåˆ†ã®ã¨ã“ã‚ã§ã¯ KrbServiceName HTTPã ã¨ãƒ€ãƒ¡ã§ KrbServiceName HTTP/ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã®FQDNã«ã—ãŸã‚‰ã‚ã£ã•ã‚Šé€šã£ãŸã€‚ ãƒãƒƒãƒˆã§è¦‹ã‹ã‘ãŸè¨å®šä¾‹ã ã¨ã€ŒHTTPã€ã‹è¨å®šãªã—ãªã®ã§è‡ªåˆ†ã¨ã“ã‚ã ã‘ãŠã‹ã—ã„ã®ã‹ï½žã€‚ã‚ã‹ã‚‰ã‚“ã€‚ LogLevelã‚’debugã«ã—ã¦error.logã‚’è¦‹ã‚‹ã€‚ KrbServiceNameã‚’HTTPã«è¨å®šã—ã¦ã„ã‚‹ã¨ä»¥ä¸‹ã®é€šã‚Šã€ŒHTTP@ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã®FQDNã€ã«å¯¾ã™ã‚‹credentialã‚’å¾—ã‚ˆã†ã¨ã—ã¦ã„ã‚‹ã£ã½
graceful_life 2013/11/18
ä»Šã¾ã§ã§ä¸€ç•ªæ¬²ã—ã„æƒ…å ±ãŒã¾ã¨ã¾ã£ã¦ãŸã€‚

service

authentication

èªè¨¼

windows

activedirectory
ãƒªãƒ³ã‚¯
NAT çµŒç”±ã® Active Directory ã®ã‚µãƒãƒ¼ãƒˆ - Windows Server
ã“ã®è¨˜äº‹ã§ã¯ã€NAT çµŒç”±ã® Active Directory ã®ã‚µãƒãƒ¼ãƒˆå¢ƒç•Œã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ å…ƒã® KB ç•ªå·: 978772 ã¾ã¨ã‚ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ã‚¢ãƒ‰ãƒ¬ã‚¹å¤‰æ› (NAT) ã¯ã€é€ä¿¡ä¸ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã®ã‚¢ãƒ‰ãƒ¬ã‚¹æƒ…å ±ã‚’å¤‰æ›´ã—ã¦ã€é€ä¿¡å…ƒãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«é–¢ã™ã‚‹è©³ç´°ã‚’å‰Šé™¤ã™ã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ‰‹æ³•ã®é¸æŠžã§ã™ã€‚ ã“ã‚Œã¯ã€ã»ã¨ã‚“ã©ã®å ´åˆã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ãƒ‡ãƒã‚¤ã‚¹ã«ã‚ˆã£ã¦è¡Œã‚ã‚Œã€ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ã‚¢ãƒ‰ãƒ¬ã‚¹ ã‚¹ã‚ãƒ¼ãƒ ã‚’ç°¡å˜ã«ä½¿ç”¨ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã“ã¨ã‚’ç›®çš„ã¨ã—ã¦ã„ã¾ã™ã€‚ã¾ãŸã€ç†æƒ³çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚ˆã‚Šã‚‚ä½Žã„å ´åˆã‚‚ã‚ã‚Šã¾ã™ã€‚ ãƒ‰ãƒ¡ã‚¤ãƒ³ ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©ãƒ¼ (DC) ã‹ã‚‰ DC ã¸ã®é€šä¿¡ã¨ NAT çµŒç”±ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“é€šä¿¡ã¯ã€åˆä½µã¨å–å¾—ã®ã‚·ãƒŠãƒªã‚ªã§ã‚ˆãç™ºç”Ÿã™ã‚‹ã‚·ãƒŠãƒªã‚ªã§ã™ã€‚ 2 ã¤ã®ä¼šç¤¾ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’æŽ¥ç¶šã™ã‚‹ã¨ãã«å¿…è¦ãªã‚µãƒ¼ãƒ“ã‚¹ã® 1 ã¤ã¯ã€Active Directory ã«ã‚ˆã£ã¦æä¾›ã•ã‚Œ
graceful_life 2012/10/05
ã‚„ã£ã±ã‚ŠADã¯ãƒ€ãƒ¡ã§ã™ã‹ã€ãã†ã§ã™ã‹ã€‚

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

Microsoft

ãƒ†ã‚¹ãƒˆ

ãƒ‰ãƒ¡ã‚¤ãƒ³

ã‚µãƒ¼ãƒ“ã‚¹

ActiveDirectory
ãƒªãƒ³ã‚¯
ç¬¬1å›žã€€Windows OSã«ãŠã‘ã‚‹æ™‚åˆ»åŒæœŸã‚µãƒ¼ãƒ“ã‚¹ã¨NTP
ç¬¬1å›žã€€Windows OSã«ãŠã‘ã‚‹æ™‚åˆ»åŒæœŸã‚µãƒ¼ãƒ“ã‚¹ã¨NTPï¼šWindowsãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ™‚åˆ»åŒæœŸã®åŸºç¤Žã¨ãƒŽã‚¦ãƒã‚¦ï¼ˆ3/4 ãƒšãƒ¼ã‚¸ï¼‰ Active Directory ç’°å¢ƒã§ã®æ™‚åˆ»åŒæœŸã®ãŸã‚ã®éšŽå±¤æ§‹é€ Windows Server 2003ã®Active Directoryç’°å¢ƒã§ã¯ã€å„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŠã‚ˆã³ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒ»ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©ã¯æ™‚åˆ»åŒæœŸã®ãŸã‚ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã—ã¦NTPã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã€‚ã—ã‹ã—ã€ãã®éšŽå±¤æ§‹é€ ã¯ç‹¬è‡ªã®ã‚‚ã®ã¨ãªã£ã¦ã„ã‚‹ãŸã‚ã€SNTPã«ä¼¼ãŸæŒ™å‹•ã§æ™‚åˆ»ã®åŒæœŸãŒè¡Œã‚ã‚Œã‚‹ï¼ˆå•ã„åˆã‚ã›ã¯Symmetric Active Modeã§è¡Œã‚ã‚Œã‚‹ãŒã€å¿œç”ã¯Sever Modeã«ã¦è¡Œã‚ã‚Œã‚‹ï¼‰ã€‚ Active Directoryã§ã¯ã€ãã®é ‚ç‚¹ã‚’FSMOã®å½¹å‰²ã®1ã¤ã§ã‚ã‚‹PDCã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚¿ãŒå—ã‘æŒã¡ã€ãã‚Œä»¥å¤–ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒ»ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©ã¯PDCã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚¿ã‚ã‚‹ã„ã¯ã»ã‹ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒ»ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©ã‹ã‚‰ã€æ™‚åˆ»åŒæœŸã‚’è¡Œã†ã€‚å„
graceful_life 2012/03/28
w32tm /monitor ã‚³ãƒžãƒ³ãƒ‰ã‚’è¦šãˆãŸã€‚

windows

ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†

ActiveDirectory

ntp

w32time
ãƒªãƒ³ã‚¯
Active Directoryãƒ‰ãƒ¡ã‚¤ãƒ³ã«ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ¨©é™ã§ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚’10å°ä»¥ä¸Šå‚åŠ ã•ã›ãŸã„
ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã®æ“ä½œã ã‘ã§æ¸ˆã‚€ã®ã§ã‚ˆãä½¿ã„ã¾ã™ã€‚ã—ã‹ã—ï¼Œã“ã®æ¨©é™ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã§ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚’ãƒ‰ãƒ¡ã‚¤ãƒ³ã«å‚åŠ ã•ã›ã‚‹ã¨ï¼Œ10å°ã‚’éŽãŽãŸã¨ã“ã‚ã§ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ã¦ãã‚Œä»¥ä¸Šã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚’è¿½åŠ ã§ããªããªã‚Šã¾ã—ãŸï¼ˆå›³1ï¼‰ã€‚ã“ã‚Œã¯ãªãœèµ·ãã‚‹ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã¾ãŸï¼Œã©ã†ã™ã‚Œã°å›žé¿ã§ãã‚‹ã§ã—ã‚‡ã†ã‹ã€‚ ã“ã®å•é¡Œã¯ï¼ŒActive Directoryãƒ‰ãƒ¡ã‚¤ãƒ³ã®ä»•æ§˜ã«ã‚ˆã‚Šç™ºç”Ÿã—ã¾ã™ã€‚ã¾ãŸï¼Œå·¥å¤«ã™ã‚Œã°å›žé¿å¯èƒ½ã§ã™ã€‚ Active Directoryãƒ‰ãƒ¡ã‚¤ãƒ³ç’°å¢ƒã§ï¼Œã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚’ãƒ‰ãƒ¡ã‚¤ãƒ³ã«å‚åŠ ã•ã›ã‚‹ã«ã¯ï¼Œæœ€ä½Žã§ã‚‚ä»¥ä¸‹ã®æ¨©é™ã‚’æŒã¤ãƒ¦ãƒ¼ã‚¶ãƒ¼ã§ãƒžã‚·ãƒ³ã‚’æ“ä½œã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ãƒ»å‚åŠ ã•ã›ã‚‹ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿å´ ãƒãƒ¼ã‚«ãƒ«ç®¡ç†è€…æ¨©é™ãŠã‚ˆã³ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚’èªã¿è¾¼ã‚€ãŸã‚ã®æ¨©é™ ãƒ»å‚åŠ ã•ã›ãŸã„ãƒ‰ãƒ¡ã‚¤ãƒ³å´ ã€Œãƒ¯ãƒ¼ã‚¯ã‚¹ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ãƒ‰ãƒ¡ã‚¤ãƒ³ã«è¿½åŠ ã™ã‚‹ã€æ¨©é™ï¼Œã¾ãŸã¯Computersã‚³ãƒ³ãƒ†ãƒŠã¸ã®ã€Œã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ»ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã®ä½œæˆã€æ¨©é™ ä»Šå›žã®å•é¡Œ
graceful_life 2012/02/14
çŸ¥ã‚‰ã‚“ã‹ã£ãŸã€‚ã ã‹ã‚‰ã‚ã®ã‚·ã‚¹ãƒ†ãƒ ã‚ã‚“ãªã‚“ãªã£ã¦ã‚‹ã®ã‹ã€‚ãµã‚€ãµã‚€

ActiveDirectory

ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿

ãƒ‰ãƒ¡ã‚¤ãƒ³
ãƒªãƒ³ã‚¯
PowerShellã«ã‚ˆã‚‹ActiveDirectoryç®¡ç†ã€€â€•â€•ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ç·¨
CodeZineç·¨é›†éƒ¨ã§ã¯ã€ç¾å ´ã§æ´»èºã™ã‚‹ãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼ã‚’ã‚¹ã‚¿ãƒ¼ã«ã™ã‚‹ãŸã‚ã®ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã€ŒDevelopers Summitã€ã‚„ã€ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ç”Ÿãã–ã¾ã‚’ãƒ–ãƒ¼ã‚¹ãƒˆã™ã‚‹ãŸã‚ã®ã‚¤ãƒ™ãƒ³ãƒˆã€ŒDevelopers Boostã€ãªã©ã€ã•ã¾ã–ã¾ãªã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã‚’ä¼ç”»ãƒ»é‹å–¶ã—ã¦ã„ã¾ã™ã€‚
graceful_life 2011/08/29
ãµã‚€ã‚Š

ActiveDirectory
ãƒªãƒ³ã‚¯
winbind ã§ Linux ã®èªè¨¼ã‚’ ActiveDirectory ã«ã¾ã‹ã›ã‚‹ - daily dayflower
ä¸€è¡Œã¾ã¨ã‚ è¤‡æ•°ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ä¿¡é ¼é–¢ä¿‚ã‚’æ§‹ç¯‰ã—ã¦ã„ãªã„å ´åˆï¼Œwinbind ã® idmap backend ã¨ã—ã¦ rid ã‚’ä½¿ã†ã¨ä¾¿åˆ© å‰ãƒ•ãƒª ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹ãŸã³ã«ãƒ¦ãƒ¼ã‚¶ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã™ã‚‹ã®ãŒé¢å€’ã ï¼Œã¨ã„ã†ã“ã¨ã§ã‚ˆã†ã‚„ãè…°ã‚’æ®ãˆã¦ winbind ã«ã¤ã„ã¦å‹‰å¼·ã—ã¾ã—ãŸã€‚ãƒãƒƒãƒˆä¸Šã«æœ‰ç”¨ãªæ–‡æ›¸ãŒå¤šãã¦åŠ©ã‹ã‚Šã¾ã—ãŸã€‚ CentOS 5.0 samba-3.0.23c-2.el5.2.0.2 ã¨ã„ã†ç’°å¢ƒã§ï¼Œä»¥ä¸‹ã®ã‚ˆã†ãªåç§°ã‚’ä¾‹ã¨ã—ã¦ä½¿ã„ã¾ã™ã€‚ ãƒ‰ãƒ¡ã‚¤ãƒ³å: HOGE ActiveDirectory ã®ãƒ¬ãƒ«ãƒ : hoge.example.com ActiveDirectory ã® DC: dc.hoge.example.com UNIX ã‚µãƒ¼ãƒã® NETBIOS å: PENGUIN ActiveDirectory ã®ãƒ¦ãƒ¼ã‚¶: dayflower åŸºç¤ŽçŸ¥è˜ ãƒ¦ãƒ¼ã‚¶ãŒ *nix ã‚’åˆ©ç”¨ã—ã‚ˆã†ã¨
graceful_life 2011/05/08
ldap

winbind

linux

samba

èªè¨¼

ActiveDirectory
ãƒªãƒ³ã‚¯
Djangoã®èªè¨¼ã‚’Active Directoryã§ - è¨˜æ†¶ã¯å‰Šé™¤ã®æ–¹å‘ã§
Djangoã‚’ä½¿ã£ãŸç¤¾å†…ã‚¢ãƒ—ãƒªã§ã€ãƒ¦ãƒ¼ã‚¶ç™»éŒ²ã‚’è‡ªåˆ†ã§ã‚„ã£ã¦ã‚‚ã‚‰ã†ã¨ã“ã‚ã¾ã§å‡ºæ¥ãŸã‚“ã ã‘ã©ã€ã“ã®ã‚¢ãƒ—ãƒªã®ãŸã‚ã«IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¦šãˆã‚‹ã®ãŒã‚ã‚“ã©ãã•ã„ã€‚ ç¤¾å†…ã§ Active Directory ãŒå‹•ã„ã¦ã„ã‚‹ã‚“ã ã‹ã‚‰ã€ãã‚Œã‚’ä½¿ã£ã¦èªè¨¼ã§ããªã„ã‹è©¦ã—ã¦ã¿ãŸã‚‰ãªã‚“ã¨ãªãå‹•ã„ã¦ã‚‹ã®ã§ãƒ¡ãƒ¢ã—ã¦ãŠãã€‚ WinXP(2003 Server), Python 2.4.4, Django 0.96, Python-LDAP 2.0.6 for Python 2.4 ã§å‹•ä½œç¢ºèªæ¸ˆã¿ã€‚ å‚è€ƒURL http://ymasuda.jp/python/django/docs/authentication.html http://www.jrandolph.com/blog/2006/02/01/hacking-in-ldap-support-to-django/ Python-LDAP Python-LDAP fo
graceful_life 2011/04/26
Django

èªè¨¼

ActiveDirectory
ãƒªãƒ³ã‚¯
1