Using AD as an auth source without joining domain?

[PredatorVI]

Is it possible to use Active Directory as an authentication source without joining the domain, maybe through LDAP?

It doesn't seem possible to just use the AD configuration without joining the domain.

For the LDAP configuration, I can't seem to get it to work using the options available. Typically, the differences in AD schema requires custom settings for LDAP to work and I don't see an obvious way to change the options/filters to look for the AD-specific user attributes.

Is this possible or am I out of luck?

 

[cyberjock]

Not possible for AD.

Not 100% sure on LDAP, but I am 100% sure you have to join LDAP with the FreeNAS implementation. You might be able to with some weird hacker with LDAP, but that's beyond what FreeNAS can do. But my guess based on what I know about how LDAP works is "no".