Hacker News Reader

genuinely interested, what are the alternatives ? i know ping/forgerock and some old ibm stuff.

what is state of the art today that compares to ActiveDirectory (not talking azureAd - or whatever they call it these days) ?

View on HN

Samba4 is the closest you can get. It is not as nice as ActiveDirectory.

> Samba is an important component to seamlessly integrate Linux/Unix Servers and Desktops into Active Directory environments. It can function either as an Active Directory Domain Controller or as a member server.

What's something that AD provides that this does not?

It certainly sounds like an (almost) drop-in replacement.

Samba4 covers core AD features like Kerberos, LDAP, and can act as a DC, but it’s not a full drop-in. GPO support is limited, management tools aren’t as robust (no full RSAT equivalent), and some advanced AD features (like DAC or ADCS) aren’t supported. Fine for smaller setups, but not 1:1 with enterprise AD.

Why not Okta? I know a company that uses it and no AD. (But they are mostly Mac)

Reply on news.ycombinator.com