| 1 |
My school uses Macs. They run Mac OS X Server. At each computer in the |
| 2 |
computer lab, each student is able to logon using their username and |
| 3 |
password to their "own desktop" because each computer is authenticated |
| 4 |
remotely and their home folder is a remote mount. All programs run |
| 5 |
locally. |
| 6 |
|
| 7 |
At studentserver.myschool.org, they run an appletalk file share |
| 8 |
server, perhaps another sort of file sharing server, and an ssh |
| 9 |
server, all of which I can logon to using my username. At |
| 10 |
queenbee.myschool.org, the school runs an ldap server which is used |
| 11 |
for authentication on each of the computer lab computers. Logged in as |
| 12 |
administrator, I looked at the directory services program to obtain |
| 13 |
ldap information. They connect to the queenbee server and use the base |
| 14 |
of dn=..... Also part of this string is cn=config and it is setup to |
| 15 |
get all details "from server". All user name entries have the normal |
| 16 |
objectType=posixAccount in addition to some unique apple attributes. |
| 17 |
|
| 18 |
One of the attributes is homeFolder. For me, this is located at |
| 19 |
/Network/studentserver.myschool.org/Volumes/Hive/myUserName. Logged |
| 20 |
onto my account using a mac, in addition to my home folder being |
| 21 |
present as I have all my settings unique to me, I can type cd ~ in |
| 22 |
terminal and get my homefolder, which is mapped to this path. I can |
| 23 |
also cd /Network/studentserver.myschool.org and peak around. My |
| 24 |
authentication to this server is based on my username and the group |
| 25 |
that I'm in (which was authenticated by ldap before), so it is safe to |
| 26 |
conclude that studentserver.myschool.org also logs into this ldap |
| 27 |
server and authenticates me using normal credentials. |
| 28 |
|
| 29 |
I installed Linux on one of the G5 towers. How can I set the computer |
| 30 |
up such that users are able to login to it using their username and |
| 31 |
password and have their home folder be their server share? OpenLDAP? |
| 32 |
SSH? AFP? I have tried openldap and I have been unable to get that to |
| 33 |
work (ldapsearch -x 'uid=myusername' works but I can't get system wide |
| 34 |
authentication working). |
| 35 |
|
| 36 |
If I did get OpenLDAP to work, what about the home folder? The |
| 37 |
homeFolder attribute ldap mentions refers to a specific place already |
| 38 |
existant on the mac computer (/Networks/studentserver.myschool.org), |
| 39 |
so perhaps the equivalant would be to have |
| 40 |
/Networks/studentserver.myschool.org in /etc/fstab and mounted. |
| 41 |
|
| 42 |
The next question, however, is how can I have this mount like a normal |
| 43 |
device directory which uses normal authentication? I have tried |
| 44 |
specifying nfs as a fs type, but this does not work. Perhaps I can |
| 45 |
utilize the existance of an ssh server running? What about afp? But |
| 46 |
then I have to be careful that it uses the normal system wide |
| 47 |
authentication mechanism (that authenicates my access to local |
| 48 |
folders, for instance) and not a logon of its own. |
| 49 |
|
| 50 |
And on top of that, even after getting OpenLDAP to authenticate system |
| 51 |
wide, how will it know to make the homefolder based on the homeFolder |
| 52 |
attribute? |
| 53 |
|
| 54 |
Or perhaps there's another way to do this, completely through ssh, but |
| 55 |
that's doubtful. Any ideas? |
| 56 |
|
| 57 |
-- |
| 58 |
Jason A. Donenfeld |
| 59 |
Deep Space Explorer |
| 60 |
|
| 61 |
-- |
| 62 |
gentoo-admin@g.o mailing list |
Archives