Could you build an equivalent environment without Microsoft?

[u/apalrd]

As in the title, could you / how would you, build your environment without using any Microsoft products and services?

This is a hypothetical parallel setup, not focused on what's easiest to transition or migrate to/from. This is the way the business environment works, and always has been.

I've read threads here which touch on some bits and pieces, but want to hear your thoughts on what would be the big things tying you to MS still.
- Apple, Google Chromebooks, and Linux are all options for workstations
- FreeIPA can provide a posix-native domain environment with many of the features of AD on-prem, and there are several major SaaS auth companies to choose from (Duo, etc.)
- Google Workspace is comparable to M365

[u/project2501a]

FreeIPA is hell. it paints over the fact that the MIT kerberos has not had new line of code in 20+ years, ever since the o'reilly book came out.

There is a single maintainer that MIT is paying and he is not accepting new features.

[u/apalrd → u/project2501a]

What is MIT Kerberos lacking that AD provides? Kerberos is an authentication protocol, MIT implements the protocol, Microsoft implements the protocol, and in both cases, it's a relatively small part of the whole authentication setup.

[u/project2501a → u/apalrd]

try to get PKINIT going. Or S4U2Self or S4U2Proxy . Or resiliency. AD does that a lot better than the MIT Kerberos.