My school district has all of the machines on their domain.
Linux still doesn't have anything remotely as capable as Active Directory.
Linux still doesn't have anything remotely as capable as Active Directory.
What about signing in with your firstname.lastname account, with the particular web app talking with the AD server through something like LDAP?
Thus, your credentials for all of the integrated software should be managed centrally, in the particular AD server or a similar solution.
Or maybe even SSO with something like Kerberos or an alternative?
And why do you need to control people’s laptop login? That can be local.
Some organizations might want to ensure that your account follows certain policies in regards to the password expiry dates or how "secure" they are.
Furthermore, if you leave an organization, they might want to remove all of your access credentials to all of the linked platforms/devices in one fell swoop.
While you are in the organization, they might want to allow you to use certain pieces of software (say, GitLab, Nextcloud, Mattermost, anything that talks LDAP) by giving you a particular group membership, such as everything for PROJECT_X/CLASS_X and so on.
Similarly, when a certain platform requires user credentials, they might also want to explicitly allow this platform to integrate with their account management software, by giving it certain credentials to talk to the AD server, which can later be revoked.
Oh, and password resets are also nice to centralize, in case you ever screw up.
Sometimes their hand might also be forced due to compliance reasons: imagine Google basically owning your company and information about all of the accounts/devices due to them having the actual data.
Group policy is such an insanely convenient configure-once-apply-everywhere system, I'm still not sure why anyone would run a corporate network without it. Modern MDM solutions don't even come close to the extensive level of customization you can do with a GPO.
Chrome is outright terrifying to have on a computer if you don't push down about four pages of enterprise policies to lock it down.
The idea of letting employees have administrative access to PCs that sensitive corporate data or childrens' personal info is on is downright terrifying.
If banks can let you access your account information on non-bank owned machines and parents can access their kids personal info from their phones I think we can manage a fleet of untrusted endpoints.
The number of times I have seen people being okay with computer slowdown due to adware or viruses is insane. Some folks I know go with policy of computer format over every year because it is "natural" for computer to get slow over time according to them. Really most people are fine with downloading any software they see from web. There is a reason that fake software are highest paid ad category and only porn sites shows it.
I legitimately want more people to talk about this and to share their experiences. Do people run OpenLDAP? Something like FreeIPA? Maybe 389 Server?
What's the most popular or maybe easiest to use *nix solution for managing lots of accounts and devices, policy etc.? What about solutions for just managing accounts/login information or integrating with self-hosted software of all sorts?
Spoken like someone with identifiable personality disorder. Get evaluated and stop pathetically trying to hurt others when it is clear the deep anxieties are yours.
AD is only miraculous in that it is the one thing, the one and only thing among a vast many, that Microsoft got right. And the reason they got it right is that AD is LDAP and Kerberos. IOW, AD is a Microsoft-esque gui for LDAP and Kerberos. Really. It does not slice and dice, it does not blend; it is merely authentication and authorization. If you'd like, AD will auth Linux boxen users all day long. Anything else AD does is only germane to Windows.
Microsoft is losing money to have schools run this software.