Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 06 Oct 2001 19:36:39 -0500
From:      Carroll Kong <damascus@home.com>
To:        Evan Sarmiento <evms@cs.bu.edu>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Re: FreeBSD and Active Directory
Message-ID:  <5.1.0.14.2.20011006192803.03a10cb0@netmail.home.com>
In-Reply-To: <200110062149.f96LnFj26783@csa.bu.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
         If he is your superior, you should obey his wishes, no matter how 
wrong and silly they are.  He obviously has a lack of understanding of how 
these systems work.  Since he does not understand it, he is too afraid of 
the "mysterious havoc" that will ensue.  You can be sure that he will be 
the first to blame your FreeBSD laptop if the Microsoft DNS server goes 
down.  I think you are putting yourself too much at risk by contending with 
this guy.

         However, to give you some ammunition if he is remotely 
intelligent.  FreeBSD laptops have been in existance and co-existing in a 
"Windows network" before Active Directory existed.  Does he understand 
network protocols?  He needs an application to take advantage of the layer 
7 active directory.  FreeBSD has no such applications nor primitives to 
allow such.  (you already stated this though).  If you really want to beat 
him with facts, tell him to do a test run on an isolated network with 
FreeBSD and a Windows 2000 Active Server.  Run a sniffer on the switch 
(switch to promiscuous mode or hang off of a hub).  Show him the network 
sniffer analysis and correlate to system activity.  You will find no such 
Active Directory requests from the FreeBSD box.  I am sure he still will 
not believe it, since this guy obviously does not understand how systems 
and networks function.  How could he possibly understand the output of a 
network sniffer?

         So, I would honestly not try too hard.  He is in charge, he is 
held liable for the network.  He has a lack of serious understanding of 
network protocols and systems.  He does not want to risk it.  I suppose I 
cannot blame him.  However, his attitude of "I am not going to risk it" as 
opposed to really thinking it out and doing a test is somewhat typical of 
the IT world today.

At 05:49 PM 10/6/01 -0400, Evan Sarmiento wrote:
>Hello,
>
>My high school recently hired a new technology coordinator. Instead
>of using open source software, the coordinator redesigned the network
>to support Windows 2000 and Active Directory. For those of you who
>do not know what Active Directory is: Active Directory is an LDAP
>server which delineates what privledges each host on the network
>has, etc.
>
>I asked him his policy on laptops. After a long conversation, he
>said: "I do not allow any laptops running *NIX to be placed
>on the network, as I believe it will interfere with
>Active Directory."
>
>I tried to explain to him how false his assumption was, but,
>he would not recant his infamy. I can understand, in a way --
>He wants to make sure that the network is running for
>students to use.
>
>How would I go about convincing this enthusiast that FreeBSD
>will not somehow interfere with Active Directory? This is what
>I have tried so far.
>
>Fact: FreeBSD does not have any capability which would allow it to interact
>with Active Directory
>Response: I don't want to risk it
>
>Fact: Active Directory does not try to auto-configure clients, unless
>the client has the Active Driectory server name specified.
>Response: I don't want to risk it
>
>Can anyone help?
>
>Thanks,
>Evan
>
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-stable" in the body of the message


-Carroll Kong


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.2.20011006192803.03a10cb0>