Hacker News Reader

Comment by adolfojp | Hacker News Reader

I don't think it supports AAD, just AD. You got me way too exited for a minute.

It's kind of odd that they are advertising this now just as Microsoft is trying to get everyone to ditch on-prem AD. Is it just them saying "we ship SSSD in the default install now, so you can buy support from us!", or what?

Some way of signing into Ubuntu with a custom SAML provider would be very cool. Windows supports it via their "credential provider"[0] framework and Google uses that to provide sign-in for Windows with your GSuite credentials.

[0]: https://docs.microsoft.com/en-us/windows/win32/secauthn/cred...

I certainly hope ms will drop the need for ad (in favour of azure ad) - but it's still needed for eg azure virtual desktop (you need a vm running ad - or "azure ad ds"[1] in azure parlance).

A bit frustrating, as you can otherwise join a windows 10 desktop (or vm) to just azure ad for sso etc.

[1] https://docs.microsoft.com/en-us/azure/active-directory-doma...

That's still the most bizarre product decision Microsoft has made (to me) in the past 5 years. They are trying to get everyone to Azure and Azure AD, then they launch a product that is basically Citrix but 50% of the cost, with the catch that you need to still have on-prem AD to use it. What?

> 50% of the cost

well that depends, the higher subscriptions include it for free.

I should of been more specific. The higher subscriptions include the licensing, so you just have to pay for compute, vs Citrix where you have to pay for Citrix Licensing, Windows Licensing, and compute.

actually there is a way to support azure ad for servers: https://docs.microsoft.com/de-de/azure/virtual-machines/linu... it uses device authentiction.

sadly not for desktops, btw. you can create your own pam provider (grant_type=password) and put it into sssd (for local cache), but that does not work with 2fa.

Reply on news.ycombinator.com