My Active Directory Installation

So here’s my afternoon’s accomplishment (or lack there of) relating to my task list in the previous post:

  1. DNS (must reference DNS server running on firewall) – Windows DNS server removed and the domain of the Windows box changed to match the Kerberos realm (same as the AD domain) on the firewall DNS.
  2. AD (myself as dummy user, I must be able to logon to the domain) – Done!
  3. Terminal Server (change group security policy) – I can’t figure out how to do this because I can’t find any settings related to it in the domain security policy.
  4. SharePoint (fix SQL error although I have no idea how) – Not done!
  5. Samba (to share home directories on linux server) – Done, with one problem: When logging onto the domain, the user has no write permissions to the Windows profile directory (\\Tango\username\profile). This means that the windows profile cannot be loaded and a local one is used instead.
  6. OpenLDAP (must talk to AD to authenticate linux boxes) – Not done!

I suspect that fixing point 6 and changing the ownership of the user directories to users that have UIDs and GIDs in AD will allow users logging onto the domain to write to their profile directories (see note to point 5).
So the new todo list looks like this:

  1. OpenLDAP must talk to AD to authenticate linux boxes
  2. Users must be able to write to remote profile directories
  3. Test Terminal Services
  4. SharePoint (fix SQL error)
Advertisements
Categories: Sysadmin | 2 Comments

Post navigation

2 thoughts on “My Active Directory Installation

  1. Actually, OpenLDAP doesn’t need to talk to AD at all. AD creates a Kerberos realm. To *authenticate* users on Linux machines, you need libpam-krb5 (PAM module for Kerberos 5)

    I’ve done that bit before. It’s not too difficult.

    Authorization is another ball-game. I suspect that it is possible to do this with OpenLDAP. I know it is possible to do this with some config files. In the end, you grant permissions to users with chown and chmod – that doesn’t change.

  2. Pingback: Quote of the day « More or less interesting moments in life

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Blog at WordPress.com.

%d bloggers like this: