samba - Apr 2026 - [OT?] AD, EAP-TLS and linux distro...

Probably it's a bit OT but really i don't know where to ask.


We are using AD (MS AD) to deploy certificates to client for EAP-TLS;
there's some way for a Linux client joined with samba to the domain to use
the deployed certificate?

I can do some ldap query to extract it, for example?


Someone have some hints? Thanks.

--

David Mulder is/was working on this:
https://dmulder.github.io/group-policy-book/certautoenroll.html

we implemented something similar via certmonger/cepces.

best regards
Franz

On Wed, Apr 1, 2026 at 11:10?PM Marco Gaiarin via samba <
samba at lists.samba.org> wrote:
>
> Probably it's a bit OT but really i don't know where to ask.
>
>
> We are using AD (MS AD) to deploy certificates to client for EAP-TLS;
> there's some way for a Linux client joined with samba to the domain to
use
> the deployed certificate?
>
> I can do some ldap query to extract it, for example?
>
>
> Someone have some hints? Thanks.
>
> --
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>