Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can we set Windows clients to authenticate against an LDAP Server running on Ubuntu?

share|improve this question
If we are looking for replacement of active directory/windows domain controller,It is possible and fully successful after replaced ? And if possible by same and some observed by real environment working so will you plz post the step procedure. It would by great appreciated for us. ;) :) Md.Imran | MCSA (Cloud),MCITP(Enterprise Admin),MCTS,MCT,MCSE,MCSA,MCP – user151746 May 19 '13 at 18:58


pGina is an open source authentication system that replaces the built in authentication of the Microsoft Windows operating system. pGina uses easy-to-write plugins that allow a system to authenticate against virtually any source. Some examples are LDAP, RADIUS, SSH, FTP, SMTP, POP3, and many more.

Getting Started

In order to get up and running, simply follow the steps below.

  • Determine what line of pGina to use
  • Decide what method of authentication you are going to be using (ex: LDAP, RADIUS, FTP, SSH, etc). and download the corresponding plugin.
  • Download pGina
  • Install pGina and the plugin
  • Configure pGina and the plugin

Main Page :

share|improve this answer
Thank you for the help. I am already using pgina for this purpose. please see my last comment on oli's answer. – aneeshep Dec 19 '10 at 1:53

If pGina isn't suitable you can join the machines to a Samba 4 AD domain. The idea is to install Samba 4 and set it up as a domain controller, then have Samba authenticate against your LDAP server. I've never done this and it's a pretty nontrivial exercise, but in theory it's possible.

The SAMBA 4 AD DC HOWTO shows how to get Samba 4 going as a domain controller and join your Windows clients to your domain. You wouldn't necessarily need everything but it gives an idea how integrated you can get things.

Then, to authenticate samba connections against your LDAP server, look at The SAMBA & LDAP guide

Keep in mind Samba 4 is only a recent release. I'd avoid this for any large or commercial installation until samba 4 is more widely used.

share|improve this answer

Have you gone through the Active Directory HowTo?

share|improve this answer
That's the opposite of what he's asking (Ubuntu clients authenticating against an LDAP server on Windows). – JanC Nov 11 '10 at 5:17
@JanC The opposite would be setting up Ubuntu clients to register on a Windows AD server. This is merely the background for getting an AD server set up on Ubuntu. – Oli Nov 11 '10 at 9:32
Well, the How-To you link to is about Ubuntu using AD (which is the Windows LDAP server) for authentication? – JanC Nov 11 '10 at 10:17
@JanC Sorry I see what you mean now. I interchanging LDAP and AD as if they were the same thing. I'll freely admit my only AD experience is with Windows Server but I rather thought that for full authentication, you needed the whole AD stack (which includes OpenLDAP). But from what I read (warning: very old) that might not be the case. – Oli Nov 11 '10 at 11:46
Seems like pGina is still maintained. Good to know... – JanC Nov 11 '10 at 11:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.