Active Directory: Difference between revisions

From techdocs
Jump to navigation Jump to search
(Created page with "'''Active Directory''' is a user and account directory service which runs on Microsoft servers. UNSW runs and supports some of these officially. From CSG's point of view, it is most interesting because: # It can be used with Kerberos to authenticate UNSW users' [[zID] and zPass. For the brave it can also be used to change passwords (see <code>man kpasswd</code> without using UNSW's web-based [https://iam.unsw.edu.au/ Identity Management] system. # It can...")
 
No edit summary
 
Line 1: Line 1:
'''Active Directory''' is a user and account directory service which runs on Microsoft servers. [[UNSW]] runs and supports some of these officially. From [[CSG]]'s point of view, it is most interesting because:
'''Active Directory''' (AD) is a user and account directory service which runs on Microsoft servers. [[UNSW]] runs and supports some of these officially. From [[CSG]]'s point of view, it is most interesting because:


# It can be used with [[Kerberos]] to authenticate UNSW users' [[zID] and [[zPass]]. For the brave it can also be used to change passwords (see <code>man kpasswd</code> without using UNSW's web-based [https://iam.unsw.edu.au/ Identity Management] system.
# It can be used with [[Kerberos]] to authenticate UNSW users' [[zID] and [[zPass]]. For the brave it can also be used to change passwords (see <code>man kpasswd</code> without using UNSW's web-based [https://iam.unsw.edu.au/ Identity Management] system.

Latest revision as of 09:33, 30 August 2023

Active Directory (AD) is a user and account directory service which runs on Microsoft servers. UNSW runs and supports some of these officially. From CSG's point of view, it is most interesting because:

  1. It can be used with Kerberos to authenticate UNSW users' [[zID] and zPass. For the brave it can also be used to change passwords (see man kpasswd without using UNSW's web-based Identity Management system.
  2. It can also be used with LDAP to both authenticate users as with Kerberos, and can additionally provide some personal and role information about users such as their name, home folder location, official email address, etc.

Note that "home folder" is different to CSE's home directory, being UNSW IT-managed and backed up, Windows-compatible file storage. See /unsw.