Используйте Google Apps/Cloud Services в качестве Замены Контроллера домена

Это кажется единственным способом сделать, это должно выбрать больше атрибутов из серверов LDAP как так:

<AuthnProviderAlias ldap server1>
  AuthLDAPURL ldap://server1/whatever?uid,type1?one?
</AuthnProviderAlias>

<AuthnProviderAlias ldap server2>
  AuthLDAPURL ldap://server2/whatever?uid,type2?one?
</AuthnProviderAlias>

Когда аутентификация успешно выполняется, Вы находите также AUTHENTICATE_type1 или AUTHENTICATE_type2 как переменные среды, в зависимости от которых сервер LDAP сделал аутентификацию.

С mod_headers затем становится возможно установить значение заголовка этот путь

Header set UserType type1 env=AUTHENTICATE_type1
Header set UserType type2 env=AUTHENTICATE_type2
8
задан 10 September 2012 в 00:03
2 ответа

No, Google doesn't currently offer this service. Even if they did, it's a not a very good idea to have all of your local authentication sources in the cloud.

Let's say that you do move all of your authentication to some cloud service. Now, imagine that your ISP has an outage. Now no one can log in, even though your local network is fine. That's bad. Even if you could cache the last x logons on each machine, any sort of outlage longer than a "blip" would be troublesome.

You also are asking about moving print and file sharing to the cloud as well. Google, specifically, doesn't offer this service either outside of maybe you adding a custom layer to the top of google drive for sharing. Most other cloud services charge for data transferred to and from their service. Imagine if every single print job had to traverse your network egress, go to this server, be spooled there, and then sent back to the printer on your local site? Your data transfer charges would start at double the size of all of your printed documents. Not to mention that if your ISP's connection is down, no one can print, even though the printers are in your office. Have fun explaining that to your co-workers.

The same problem that exists for authentication and printing exists for file sharing as well. Not to mention that you need to worry about regular off-server backups for file shares since users will delete important things that need to be restored.


tl;dr It's generally considered a bad idea to move local services like authentication and file\print management to the cloud. Don't do it.

Does it make sense for web, mail and things like that? Sure! Does it make sense to move "100%" to the cloud? Nope.

21
ответ дан 2 December 2019 в 22:42

It's not possible to replace your Domain Controller with Google Apps.

6
ответ дан 2 December 2019 в 22:42

Теги

Похожие вопросы