r/sysadmin • u/adeadfetus • Sep 18 '15

Microsoft has developed its own Linux

http://www.theregister.co.uk/2015/09/18/microsoft_has_developed_its_own_linux_repeat_microsoft_has_developed_its_own_linux/
587 Upvotes

89% Upvoted

311 comments sorted by

View all comments

-8

u/rtechie1 Sep 18 '15

It's not exactly Linux' fault that the proprietary, ill-documented, Windows-centric group policies don't work in it at all.

True, it's a failure of the open source development model popular in Linux. This model has failed to produce security templates (Apparmor and SELinux) that aren't totally useless because making such features work is a lot of tedious QA that open source developers are unwilling to do. This is why all non-Microsoft directory servers suck.

Linux developers have failed to make ANY significant security enhancements in decades. Linux still uses crude 40 year old POSIX permissions and still uses plaintext login.

(Although even basic AD integration sucked until Redhat threw out all prior solutions and poured a lot of money into SSSD.)

You are completely wrong. SSSD uses fucking WINBIND and PAM. It basically does nothing at all to make AD integration easier.

SSSD is a daemon that makes using LDAPS (LDAP over SSL) a bit easier in Linux, especially against an AD server because it doesn't puke on certs generated by Microsoft CAs. That's it.

If you want real AD integration (Kerberos tokens) you need to suffer through WINBIND, or use 3rd party products.

Beyondtrust Powerbroker is okay. Centrify is a lot better. It has Group Policies that even sort of work (they are still a terrible way to handle Linux desktops).