Gentoo Archives: gentoo-admin

From: William Merlotto <wmerlotto@×××××.com>
To: gentoo-admin@l.g.o
Subject: Re: [gentoo-admin] LDAP? SSH? How to logon to network?
Date: Sun, 09 Apr 2006 15:47:06
In Reply to: [gentoo-admin] LDAP? SSH? How to logon to network? by "Jason A. Donenfeld"
Try pam-mount with samba or nfs for the home dirs..

2006/4/8, Jason A. Donenfeld <TheMan@×××××.com>:
> > My school uses Macs. They run Mac OS X Server. At each computer in the > computer lab, each student is able to logon using their username and > password to their "own desktop" because each computer is authenticated > remotely and their home folder is a remote mount. All programs run > locally. > > At, they run an appletalk file share > server, perhaps another sort of file sharing server, and an ssh > server, all of which I can logon to using my username. At >, the school runs an ldap server which is used > for authentication on each of the computer lab computers. Logged in as > administrator, I looked at the directory services program to obtain > ldap information. They connect to the queenbee server and use the base > of dn=..... Also part of this string is cn=config and it is setup to > get all details "from server". All user name entries have the normal > objectType=posixAccount in addition to some unique apple attributes. > > One of the attributes is homeFolder. For me, this is located at > /Network/ Logged > onto my account using a mac, in addition to my home folder being > present as I have all my settings unique to me, I can type cd ~ in > terminal and get my homefolder, which is mapped to this path. I can > also cd /Network/ and peak around. My > authentication to this server is based on my username and the group > that I'm in (which was authenticated by ldap before), so it is safe to > conclude that also logs into this ldap > server and authenticates me using normal credentials. > > I installed Linux on one of the G5 towers. How can I set the computer > up such that users are able to login to it using their username and > password and have their home folder be their server share? OpenLDAP? > SSH? AFP? I have tried openldap and I have been unable to get that to > work (ldapsearch -x 'uid=myusername' works but I can't get system wide > authentication working). > > If I did get OpenLDAP to work, what about the home folder? The > homeFolder attribute ldap mentions refers to a specific place already > existant on the mac computer (/Networks/, > so perhaps the equivalant would be to have > /Networks/ in /etc/fstab and mounted. > > The next question, however, is how can I have this mount like a normal > device directory which uses normal authentication? I have tried > specifying nfs as a fs type, but this does not work. Perhaps I can > utilize the existance of an ssh server running? What about afp? But > then I have to be careful that it uses the normal system wide > authentication mechanism (that authenicates my access to local > folders, for instance) and not a logon of its own. > > And on top of that, even after getting OpenLDAP to authenticate system > wide, how will it know to make the homefolder based on the homeFolder > attribute? > > Or perhaps there's another way to do this, completely through ssh, but > that's doubtful. Any ideas? > > -- > Jason A. Donenfeld > Deep Space Explorer > > -- > gentoo-admin@g.o mailing list > >