Re: LDAP? SSH? How to logon to network?

------=_Part_21530_23347038.1144597593866
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Try pam-mount with samba or nfs for the home dirs..

2006/4/8, Jason A. Donenfeld <[email protected]>:
>
> My school uses Macs. They run Mac OS X Server. At each computer in the
> computer lab, each student is able to logon using their username and
> password to their "own desktop" because each computer is authenticated
> remotely and their home folder is a remote mount. All programs run
> locally.
>
> At studentserver.myschool.org, they run an appletalk file share
> server, perhaps another sort of file sharing server, and an ssh
> server, all of which I can logon to using my username. At
> queenbee.myschool.org, the school runs an ldap server which is used
> for authentication on each of the computer lab computers. Logged in as
> administrator, I looked at the directory services program to obtain
> ldap information. They connect to the queenbee server and use the base
> of dn=3D..... Also part of this string is cn=3Dconfig and it is setup to
> get all details "from server". All user name entries have the normal
> objectType=3DposixAccount in addition to some unique apple attributes.
>
> One of the attributes is homeFolder. For me, this is located at
> /Network/studentserver.myschool.org/Volumes/Hive/myUserName. Logged
> onto my account using a mac, in addition to my home folder being
> present as I have all my settings unique to me, I can type cd ~ in
> terminal and get my homefolder, which is mapped to this path. I can
> also cd /Network/studentserver.myschool.org and peak around. My
> authentication to this server is based on my username and the group
> that I'm in (which was authenticated by ldap before), so it is safe to
> conclude that studentserver.myschool.org also logs into this ldap
> server and authenticates me using normal credentials.
>
> I installed Linux on one of the G5 towers. How can I set the computer
> up such that users are able to login to it using their username and
> password and have their home folder be their server share? OpenLDAP?
> SSH? AFP? I have tried openldap and I have been unable to get that to
> work (ldapsearch -x 'uid=3Dmyusername' works but I can't get system wide
> authentication working).
>
> If I did get OpenLDAP to work, what about the home folder? The
> homeFolder attribute ldap mentions refers to a specific place already
> existant on the mac computer (/Networks/studentserver.myschool.org),
> so perhaps the equivalant would be to have
> /Networks/studentserver.myschool.org in /etc/fstab and mounted.
>
> The next question, however, is how can I have this mount like a normal
> device directory which uses normal authentication? I have tried
> specifying nfs as a fs type, but this does not work. Perhaps I can
> utilize the existance of an ssh server running? What about afp? But
> then I have to be careful that it uses the normal system wide
> authentication mechanism (that authenicates my access to local
> folders, for instance) and not a logon of its own.
>
> And on top of that, even after getting OpenLDAP to authenticate system
> wide, how will it know to make the homefolder based on the homeFolder
> attribute?
>
> Or perhaps there's another way to do this, completely through ssh, but
> that's doubtful. Any ideas?
>
> --
> Jason A. Donenfeld
> Deep Space Explorer
>
> --
> [email protected] mailing list
>
>

------=_Part_21530_23347038.1144597593866
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Try pam-mount with samba or nfs for the home dirs..<br><br><div><span class=
=3D"gmail_quote">2006/4/8, Jason A. Donenfeld &lt;<a href=3D"mailto:TheMan@=
zx2c4.com">[email protected]</a>&gt;:</span><blockquote class=3D"gmail_quote=
" style=3D"border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0=
.8ex; padding-left: 1ex;">
My school uses Macs. They run Mac OS X Server. At each computer in the<br>c=
omputer lab, each student is able to logon using their username and<br>pass=
word to their &quot;own desktop&quot; because each computer is authenticate=
d
<br>remotely and their home folder is a remote mount. All programs run<br>l=
ocally.<br><br>At <a href=3D"http://studentserver.myschool.org">studentserv=
er.myschool.org</a>, they run an appletalk file share<br>server, perhaps an=
other sort of file sharing server, and an ssh
<br>server, all of which I can logon to using my username. At<br><a href=3D=
"http://queenbee.myschool.org">queenbee.myschool.org</a>, the school runs a=
n ldap server which is used<br>for authentication on each of the computer l=
ab computers. Logged in as
<br>administrator, I looked at the directory services program to obtain<br>=
ldap information. They connect to the queenbee server and use the base<br>o=
f dn=3D..... Also part of this string is cn=3Dconfig and it is setup to<br>
get all details &quot;from server&quot;. All user name entries have the nor=
mal<br>objectType=3DposixAccount in addition to some unique apple attribute=
s.<br><br>One of the attributes is homeFolder. For me, this is located at
<br>/Network/studentserver.myschool.org/Volumes/Hive/myUserName. Logged<br>=
onto my account using a mac, in addition to my home folder being<br>present=
 as I have all my settings unique to me, I can type cd ~ in<br>terminal and=
 get my homefolder, which is mapped to this path. I can
<br>also cd /Network/studentserver.myschool.org and peak around. My<br>auth=
entication to this server is based on my username and the group<br>that I'm=
 in (which was authenticated by ldap before), so it is safe to<br>conclude =
that=20
<a href=3D"http://studentserver.myschool.org">studentserver.myschool.org</a=
> also logs into this ldap<br>server and authenticates me using normal cred=
entials.<br><br>I installed Linux on one of the G5 towers. How can I set th=
e computer
<br>up such that users are able to login to it using their username and<br>=
password and have their home folder be their server share? OpenLDAP?<br>SSH=
? AFP? I have tried openldap and I have been unable to get that to<br>work =
(ldapsearch -x 'uid=3Dmyusername' works but I can't get system wide
<br>authentication working).<br><br>If I did get OpenLDAP to work, what abo=
ut the home folder? The<br>homeFolder attribute ldap mentions refers to a s=
pecific place already<br>existant on the mac computer (/Networks/studentser=
ver.myschool.org),
<br>so perhaps the equivalant would be to have<br>/Networks/studentserver.m=
yschool.org in /etc/fstab and mounted.<br><br>The next question, however, i=
s how can I have this mount like a normal<br>device directory which uses no=
rmal authentication? I have tried
<br>specifying nfs as a fs type, but this does not work. Perhaps I can<br>u=
tilize the existance of an ssh server running? What about afp? But<br>then =
I have to be careful that it uses the normal system wide<br>authentication =
mechanism (that authenicates my access to local
<br>folders, for instance) and not a logon of its own.<br><br>And on top of=
 that, even after getting OpenLDAP to authenticate system<br>wide, how will=
 it know to make the homefolder based on the homeFolder<br>attribute?<br>
<br>Or perhaps there's another way to do this, completely through ssh, but<=
br>that's doubtful. Any ideas?<br><br>--<br>Jason A. Donenfeld<br>Deep Spac=
e Explorer<br><br>--<br><a href=3D"mailto:[email protected]">gentoo-a=
[email protected]
</a> mailing list<br><br></blockquote></div><br>

------=_Part_21530_23347038.1144597593866--
-- 
[email protected] mailing list