Re: [gentoo-user] Adding a gentoo workstation to Active Directory network

[Yoav Luft]

>
> In an ideal world users should use their domain username & password to log
> on when they sit down at the Linux box. And they should be mounting the
> directories they need off the file server by (double-clicking on a drive
> icon on their KDE desktop if necessary and) using their same unique
> credentials (*not yours!*). If you want to fully implement this then it's
> not a two minute job; you shouldn't need much from the Windows IT admins
> except the name of the domain and perhaps the resolvable name of the domain
> master server - you should be able to test using your own domain\user:pass
>

That is, actually, what I'm trying to achieve, but what is crucial to the
usability of the linux box is that each user (a would be developer) would
have access to his own files and the departments files on the server without
any knowledge of the working of Linux, Samba, or others. It would be
especially nice if logon names would be taken from the server, and those
relief users to manually add and configure more users.
I can think on an awkward solution, making a script that sets up a new user
and assumes the user name is the same as the one in the domain. But I am
sure there is a cleaner, better solution, only that I haven't found it yet.
So, I will sum up shortly what I want, starting from most important:
1. Users will have access to the departments files without root access with
their own privileges rather then mine (achieved through given sudo to mount,
and putting it all in a script).
2. Users will have access to their own personal files (achieved through the
same script. Not sure if it is run automatically when a user logs on)
3. Any user on the domain will be able to log on to the machine, and have
access to his files, will automatically authenticate himself to network
services, etc.

On Sat, Aug 9, 2008 at 3:15 PM, Stroller <stroller@××××××××××××××××××.uk>wrote:

>
> On 9 Aug 2008, at 01:05, Yoav Luft wrote:
>
>> ...
>> that was actually interesting, but it didn't help me much... I do not
>> manage the network, neither do I have any knowledge of it's working. I asked
>> the help desk guys to help out, but all they managed is to get me someone
>> that knew, after a 2 hours work, to mount the directories I needed manually.
>>
>
> Hi there,
>
> If I'm understanding correctly that all you want to do is mount the
> directories you need automagically then is put the details in /etc/fstab.
> http://preview.tinyurl.com/5vywbm explains how to keep credentials in a
> separate file.
>
> Aside from this, I'm afraid I'm not fully grokking what your intentions
> are. Merely mounting a couple of Windows file-shares on a Linux box isn't
> really integrating it into the AD domain. I have to admit that in my
> eagerness to sound knowledgeable I probably wasn't paying full attention
> when I read your message prior to replying yesterday.
>
> In an ideal world users should use their domain username & password to log
> on when they sit down at the Linux box. And they should be mounting the
> directories they need off the file server by (double-clicking on a drive
> icon on their KDE desktop if necessary and) using their same unique
> credentials (*not yours!*). If you want to fully implement this then it's
> not a two minute job; you shouldn't need much from the Windows IT admins
> except the name of the domain and perhaps the resolvable name of the domain
> master server - you should be able to test using your own domain\user:pass
>
> Google is muchly the enemy of your enemy. For your punctuation question I
> hope you find this a good starting point:
> http://www.google.com/search?q=samba+codepage
>
> Stroller
>
>
>