Ubuntu Servers :: LDAP - Centralized Log On Scheme Setup With 10 Computers
Aug 16, 2010
I'm trying to set up a centralized log-on scheme in a research lab with about 10 computers. It's looking like we're going with LDAP - this decision may be out of my control (but if there's an alternative that would be REALLY better, do let me know). My question is we don't really have a domain name, so when all the tutorials say cn=example,cn=com, I can't mimic this exactly. I've been trying to get away with just one, like cn=researchlab. Will LDAP work with just one, or do I need to invent a second also? On the flipside, will it work with more? Our server can be reached by
lab.department.school.edu, could I do cn=lab,cn=department,cn=school,cn=edu?
I have been able to accomplish my goal of creating an AD-like authentication using LDAP,SAMBA and LAM. From what I have seen you can have this type of setup but it doesn't allow the passing of group policies to the desktops of the users.
I've been working though [URL] tutorial trying to get openldap working.
When I get to the point where i'm setting up the client. More specifically when I do ldapaddgroup testgroup I am sent this error
"You must have OpenLDAP client commands installed before running these scripts"
I have installed the ldapscripts package along with all the required ones. Has anyone been through this, I imagine it's some little nuance that I am missing.
How can I export my Ubuntu terminal's color scheme for use on other computers?I've set up a color scheme that I like and I'd like to put it in a git repo for easy loading from other machines. Any strategy that would make it work in other terminal apps too, such as Konsole?
I am wanting to setup an office network consisting of three computers and one server. We already have the equipment ready with Vista Business pre-installed on the computers. I want to be able to create a network which allows users to use any machine as this will reduce downtime should a machine break. Also I would like user's files to be held centrally on the server which makes backups easier.
The most important element here is data backup. As like most businesses we are moving away from paper and using the computers to store important records such as customer information. If this data were to be lost, the business would come to a complete halt.
I have been looking at the idea of installing a Microsoft Small Business Server as it would be nice to have centralised control of the machines. However the cost would be over 800 which can not be justified for three machines and five users. Therefore I am turning to Linux for a alternative solution. I have previously used CentOS and Ubuntu for home use but never really gained much knowledge or experience of either.
It is my understanding that Samba can act as a Primary Domain Controller, which if I'm not mistaken is where it handles the network logins and profiles. Is this correct? I have come across many samba tutorials online but whats confusing is they are all different. Some of the tutorials involve using Kerberos and OpenLDAP. Do I need to learn about either of these? What do they do and what benefit will they bring?
Finally, I see Samba 4 is in development and is likely to bring a lot of new features which aren't available in Samba 3. Is this worth waiting for because I don't want to be upgrading everything again 6 months down the road?
I'm looking to setup a home server for the purpose of backing up and storing the files on our multiple (Windows) computers. What kind of server should I set up? Samba? Lamp?
I have been trying to set up an LDAP server for a development environment as part of an internship for a week now, and I cannot get past this point. I have been following the 10.04 server guide to set up LDAP here: URL...Once I get to the following point in the guide, it just hangs:"As an example of modifying the cn=config tree, add another attribute to the index list using ldapmodify:"I've been working on this for a week and can't understand why this won't work. I am fairly certain that I've followed the guide to a 'T.'Any idea why am I receiving a permission denied error? Is this a permissions issue with one of the config files?
I need to centralize the logging of several machine on one machine with syslog-ng.I'm currently using fail2ban for security enhancement and logwatch for log reports, which are based on file log on each machine. is it possible to keep local logging for fail2ban and logwatch (logwatch can be dropped, but not fail2ban). One other need is to move old logs to a ftp site for archiving, as in france we have to keep one year of logs.
Another thing I've seen, is that logging goes to a MySQL database instead of the filesystem which allow to have some nice feature as web frontend, search capabilities.how is it compatible with the ftp save?
I have LDAP server, it is configured and all is very well, I use it to make some authentication for our Servers and routers. Also I integrates LDAP with Radius and all is work, so LDAP is powerful to the company. Last week my manager ask me to try making these authentication for all of Company computers which is windows. So, can I use LDAP, or Active Directory? I wish to use LDAP.
In my desire to learn, mess around and set up something useful on my home network, I'm looking for something that can do centralized login and remote home directories. When someone in my family logs in to a computer, windows or linux based, I want them to be able to use their credentials, then have their remote drive mounted and ready for use. I've looked over ldap solutions, attempted to set up an OpenLDAP server and realized I have no idea what was going on. Is an ldap implementation the proper way to go for my desired solution or am I barking up the wrong tree? I've just now set up OpenDS on a VM for testing but I need to do some research there.
we have a weird problem with our opensuse 11.2 server installation.
We want to set up a LDAP Server using the Yast-LDAP Server configuriation tool.
This indeed already worked weeks ago until....this week. Maybe some updates??!
I do not know what happend exactly. The server just does not want to start again and throws following error:
Starting ldap-serverstartproc: exit status of parent of /usr/lib/openldap/slapd: 1 failed
This happend after a little check of the configuration, but without a change, with Yast. Google delivered only "reinstall your box"-answers.
So.. i did that. And now the "mystical" part: The SAME ERROR occurs with a fresh vanilla system with a brand new and simple configuration (certificats, database, pw...the first Yast config dialog...). I did not change the way i set it up.
I remember, when i did this the first time with 11.2 on that machine, when no problems occured...everything was running out of the box (except the "use commen server certificate" option...).
A time ago I've been trying to implement a PDC linux server with Samba and Openldap for centralized authentication for windows and linux clients, but I can NOT get it. So I read somewhere that there is another option called Directory Server and maybe that is possible to do. According to your experience do you recommend any 'how to' or 'tutorial' that will permit implement a PDC server for authenticating and sharing files and printers for windows and linux clients?
While I've been using Linux for a little while now, I have only recently been getting into setting up and using a server at home (in part because until recently I only had ONE computer at home). I have heard of LDAP and OpenLDAP, but I am not sure if this is the best tool to do the following. Centralize logins and passwords for all of the computers at home, so I only have to change/manage one place. Since I keep installing Linux Distros it would be nice if I didn't have to add each person, individually each time.
Provide single sign-on authentication for the user so when they go to the Samba server they don't have to do another login, but they are limited in what they can see. Basically I don't want the kids being able to see *MY* files - Works with Linux (various) and Windows (Windows 7 more than XP) - Works with desktop and laptop - Be able to, possibly, pass this authentication to the web server so likewise do not need to log into the web server after logging into the computer. - (optional) be able to set up a script to run automatically to either map network drives or mount samba directories based on the user being logged in (smb://user/<username>) and/or backup the system.
I say optional because if it can that is great, but if it cannot then it isn't a show-stopper. Like I said, I am very new to servers and networking and do not know where to start regarding this. Right now I have a basic (too open) file server and a web server just beginning to be developed (working on Drupal). Not only do I need to figure out what/where to research about the server settings but also setting up the client-side of things.
I need to change the default color scheme in Ubuntu's terminal. Or at least turn the colors completely off because this lime green hilight / light blue text is killing my eyes.
I use to keep a running instance of Apache in order to test my sites locally. I'm usually not that fussy about security, assuming my 80 and 8080 ports are closed (and, well, also the other ones).Anyway this evening I was just logging into PHPMyAdmin when I found the default username was a string of garbled characters. When I entered PHPMyAdmin, I was greeted with the message
Code: Additional features have been disabled in order to work with linked tables. To find out why click here.So I clicked and it seems that the error comes from the table
Code: $cfg['Servers'][$i]['tracking'] which has been disabled. Everything else SEEMS ok at first sight.So now I have got a few questions.
1) I checked via canyouseeme.org and the default ports are still closed. This mean it should be impossible to even try to do something on my Apache remotely, right?
2) How do I reenable the additional features?
3) How do I check if someone else logged in?
4) What about the garbled name at the login? This should be just a Firefox thing, or actually PHPMyAdmin does suggest the name of the latest login?
5) How do I set up Apache to serve only the computers in the LAN? At worst, even only the local computer would be good.
I am trying to setup LDAP and NFS for our school computer lab (authenticating student logins, file storage, etc.) but I am in over my head. I can't seem to find a good guide for 10.04 anywhere.
I would like to set up a remote desktop connection between two computers over the Internet. I already tested remote desktop within a local network but it's far from secure enough this time. I will try to follow this guide [URL] (ssh portforward and internet). This still leaves ufw and how it should be configured. Let's say I have this setup, server computer has ip 12.341.245.124 and the client has 78.12.543.234 how should ufw be configured to be secure? This remote desktop wont be connected to a local network
I have recently set up a network of 21 computers running Edubuntu 10.10 I use iTalc to communicate with the pcs and also to shutdown all of them at once. The only problem I have, is it doesn't start up again with iTalc. So I switched to ClusterSSH. Only problem I have now is that everytime I run cssh, I need to manually add IP addresses of all the pc's, before I can start issuing commands. Is there a config file or something I can populate with all the IP addresses so that it starts up with all of them already added? And while we are at it, the command to start up a computer on the network?
I've managed to get my Fedora box authenticate to AD with NSS_LDAP module with SSL working. I would like to bring this authentication to the next step by using SASL /GSSAPI, however I find very little / no documentation exist on this topic? I was wondering does anyone know where I can get the documentation on how to setup NSS_LDAP talking to AD with SASL/GSSAPI?
I am using thunderbird and evolution on my computer at work using IMAP and have been trying to configure both of the clients to access the global address book from the companies exchange 5.5 mail server.
I read this but cannot get any results when I search for a name.
[url]
How can I obtain the information that I need from the Exchange 5.5 server to setup my GAL on thunderbird or evolution.
I would like to setup LDAP (openldap) with Samba. I would like to know what should I setup first? Should I setup LDAP before Samba or Samba before LDAP?
I would like to ask:How do I setup LDAP auth of users/groups on Debian 5.0?Is it using LDAP Migration tools? Can be done differently? Using different tool? Some nice tootorial?Some up to date book for LDAP or I need to dig in openldap.org?I'm learning by book which is a lil bit older so Im bit confused.
I have looked around a while for the answer, but nothing really fits. Here is the scenario. I have one server and a few openvz VE's running. I want to be able to auth whatever possible with LDAP. I have an LDAP server setup on the host and auth works for the server users. The tricky part for me is that every VE has their own domain. and if I can do that, they will also have the same login for their VE on said domain. I can setup users and the required software on the hosts and guest, but I guess I am confused at how to manage the multiple domain part of things.
not sure if proftp can do 'name based' stuff like apache, but if it can, we can point ftp.clientdomain.foo to the main server and handle it that way.
Is it even possible to use LDAP on Ubuntu 11.04? After a full day of googling, every guide I can find is either for another version of Ubuntu or is horribly broken (including the official docs).
I ended up setting up a basic linux file server as a pdc for that office. Our main office is a windows 2000 ads domain. The two offices are connected with a vpn. I only have two users at the new location so I simply have the linux and samba usernames/passwords setup manually. I would like to know if it is possible to setup a domain trust between the two sites so I don't have to create a username/password in the remote site for every user at the main office to access. I did some searching but came up empty.
how do i use 2 computers to host 1 website? i have one of them running fine, and i just got the other one to use as well. one of them is completely configured without any problems(I have been hosing a website for about 2 strait years with it).also, I have a dynamic IP because the idiot ISP's wont give me a static. I am using Dyn DNS.
