Server :: Migrating User Profiles From MS Active Directory?
Jan 27, 2011
I have around 12 users, with their profiles present on a Windows 2003 Active Directory and I would like to migrate to an open source free alternative.Could you recommend any alternative that supports the migration of user files from Active Directory?
I have a Ubuntu 9.10 desktop, with an external HD shared via Samba, with some users and folders on it. I have another computer on the network running Winblows Server 03', handling Active Directory (that I am still setting up and testing before any serious implementation.) I've been testing GPOs I am building on an XP SP3 virtual machine that is running off my Ubuntu desktop as well, that I joined to the AD domain.
However, the Domain Controller doesn't have a very big hard drive, and I'd like to take advantage of having 930GB free on this external hard drive for roaming user profiles, especially since I backup all of the drive contents every week. This would simplify a lot for me. What would you recommend is the best way to go about setting this up with my Samba configuration? I have a feeling /media/Slave/UserProfiles permissions will get somewhat complex.
My all production PC r running under ADC windows2008 server. Recently I implement a file server in CentOS 5. Now I want to integrate Samba (File sharing) using Active Directory so that all access permission to file server comes from AD's permission.
I am trying to do as the title states, I am however having problems. I have tried deleting the profile and profile.ini in kubuntu and copying over the windows profile to home/user/.mozilla/firefox for example with firefox, this didn't work. I tried copying it there with the existing profile and changing the path of the ini file, to the windows profile name, this didn't work either. The only thing that I can think is that I am using 64 bit windows and 32 bit kubuntu.I have tried using firefox sync, this didn't work either.
I want to migrate our old NIS system to 389 Directory Server.
What I have done: * Installed Redhat 5 x86_64 * Installed 389 from EPEL * Imported NIS Data into 389 with LdapImport from Babel * Authentification over LDAP is working. (POSIX Accounts) * Installed slapi-nis
I configured slapi-nis module (dse.ldif) from the readme --> nis-getting-started.txt. And ypserver is running. But what should I do next? I don't know how to " Configuring a Domain and a Map". Where should I configure it? Commandline ? 389-console?
I've got Samba server running on CentOS box. Everything works fine when I use "path" parameter, but I think Samba should create /home dirs for clients automatically.It should look like this:Quote:
comment = Home Directory of '%u' valid users = @"Domain Group" browseable = no
I followed these steps to add a client to my active directory domain, everything is working as expected except that when a username has whitespace it creates a directory in /home with whitespace and gconf fail to access his config dir in the user's home. KDE also fails to start but I don't know what's failing yet. I found that the easiest way to fix these issues is to replace whitespaces by underline in homepaths so I changed the pam_mkhomedir source to replace the whitespaces and save it using the usermod command. It should work but is not... the reason is that I can't change the user data using the usermod because domain users are not in /etc/passwd.
I've got Samba server running on CentOS box. Everything works fine when I use "path" parameter, but I think Samba should create /home dirs for clients automatically. It should look like this:
comment = Home Directory of '%u' valid users = @"Domain Group" browseable = no writable = yes
[Code]....
When I explicitly declare "path" param, it works ok. But I need PERSONAL home dir for every user separately, not one dir for everyone.
I need to install FTP Server in CentOS and it has to integrate with Windows 2003 Active Directory. Users should use their Active directory Credentials to upload or download files in FTP Server.
I have AD DS installed on Windows Server 2008 R2. Also, I've got SLES 10.3 as NFSv4 server, which will allow remote users to mount their /home partitions. What I need, is NFSv4 w/Kerberos. As AD server already has integrated Kerberos server, I need SLES to authenticate in it.Everything works good, but when it comes to svcgssd service activation, I receive an error.Here's the log:
/usr/sbin/rpc.svcgssd -f ERROR: GSS-API: error in gss_acquire_cred(): Miscellaneous failure - No principal in keytab matches desired name
Which package I need for install AD for linux ubuntu server 9.10 could you help explane my in example, which package i need install in server and which package i need install in client.
I am trying out few stuff with Linux and Windows. I have a 'Postfix' mail server on CentOS 5.5 with 'dovecot' and 'squirrel' (webmail) working fine. I am just wondering, how can I create bulk mailboxes on CentOS 5.5 (for postscript) so that the the users can access their mail from the browser (squirrel mail)?
How can I integrate with Active Directory? I am also looking for techniques to automatically create bulk users (for example 100 users) on Active Directory with a default passwords (or random passwords if possible) that integrate with Postfix.
I would prefer to use a linux server for authentication but I will need the same configuration features.I have been looking for a good guide to setting up CentOS as an alternative to Active Directory, but have not found one yet.The features I want to see.
1. works with Windows clients. 2. Network Home folders (does not neessisarly need to hold profile information) 3. Logon scripts for clients. 4. shared printers 5. shared folders. 6. can log linux boxes in with the same credentials and logon scripts.
okay so we have multiple servers running CentOS and multiple people who need access to these machines for various tasks. i would like to be able to use the credentials from Active Directory (running on server 2008) to give them access to these servers without having to go through each server and add these people into permission groups. basically a single sign-on for all of these servers depending upon what permissions were granted in Active Directory. how do i go about doing this?
I would like to set up Some kind of windows user manager in an ubuntu sever. The windows network is already set up. I've scoured the net for hours and found nothing.
I have a squid server currently running with basic authentication. This is a must because we constantly have different people using different machines but the rules must be set per user, not per machine.
We also have a lot of users coming and going. So every time a new user comes to the office I have to manually create a user for him so he can authenticate.
Anyway.. We do not have any windows servers so no Active Directory. But I need some solution to pass the windows login to Squid.
First question: It seems I am using NTLM currently for samba as the person can map their home directories on their windows box withuot authenticating. Why can I not use it for squid?
Second question: Can I make my Centos server into an AD server?
I was working to integrate Centos 5 and AD 2003 R2, this is my set up Windows side:
1. Install Identity Management for Unix, (Windows R2 already includes the Unix attribute not entirely necessary to install IMU, but it makes easier to configure the attributes from ADUC, when IMU is installed the Unix attributes TAB is shown in the user properties)
2. Configure the Unix attributes for every user account that will be authenticating from centos.
3. Create an user account to be used as a proxy for ldap, a regular user would be enough. Password never expires.
4. Create a computer account for every centos host; assign this computer account as pre-windows 2000 account.
5. Assign a value of 4128 to the user account control property for the computer account.
root user won't be able to read the "active" xguest home directory (ll /home/xguest will only show an almost empty folder with content from /etc/skel). How can a root user list the folder of an the xguest home directory (while xguest is logged in)?
(This was posted at the end of another thread, where it probably didn't belong, so reposting here)I have Active Directory set up on one machine (and I can't really adjust the settings very much) and Ubuntu Server 10.04, which I would like to use as a client.I followed the directions at https://help.ubuntu.com/community/LD...Authentication, but when I get to
Code: getent passwd I don't see anything from the LDAP, and ssh'ing into the box from an LDAP/AD username certainly doesn't work.
In addition, I've attempted to use Webmin's LDAP Configuration module to configure it. I can connect to the server and can browse it with the LDAP browser with my settings, but the Webmin package doesn't recognize the users (which are organized in one of four Organizational Units (OUs) within the OU that I have as my Search Base) as users,
I want to create a shared folder in a ubuntu sistem but I want to know if I can get access to some users of my domain active directory windows 2003 server?If I can, I would give that security in some of the subfolders of that shared folder as explained at the example:XAMPLE:
Backups (all have access and it's shared) Mail of Charles (Can only have access Charles that have an account on domain) Mail of John (Can only have access John)
We have a small group of linux servers, currently with local logins. I want to eliminate the local logins and authenticate against the corporate AD. I've been looking at PAM - but winbind requires each machine to be added to the AD. This becomes a pain if we create new virtual or physical servers. Is it possible to have one server authenticate directly with AD, and the other servers authenticate against this server, which defers to the one server that is registered in AD?
I'm trying to get our linux servers to use Active Directory (AD), and have gotten our linux (RHEL 5) server to fetch users and groups from AD. Now I'd like to add computers (and groups of computers) to AD, and have our linux boxes make use of this info. Does anyone know how to get our linux-boxes to understand computers and computer group objects on AD?
When i try to join my Ubuntu server to Microsoft Active Directory domain, i get the error message below.
Kinit failed: Clock skew too great Failed to join domain: Time difference at domain controller I know the reason is because of the time difference between my domain controller and the Ubuntu server. But what i want to know is that possible to join a domain without time synchronisation? Because my domain controller is working for another time zone, for another Country, so i can not synchronise it with my Ubuntu server.