[sllug-members]: Holiday projects anyone?

Lamont R. Peterson lamont at gurulabs.com
Tue Nov 21 11:45:38 MST 2006


On Tuesday 21 November 2006 09:45am, Knight Walker wrote:
> On Tue, 2006-11-21 at 08:07 -0800, weales at xmission.com wrote:
> > I just setup a FC5 box.  Now I need to figure out how to use it as my
> > DC/File Server for my XP clients.
>
> Grab yourself a Samba book, or download the PDF of Samba-3 By Example
> from the Samba website.  You can use Fedora's Samba config tool, but I
> like being able to tweak and freak with all the settings in the smb.conf
> file, do things with winbindd, setup user aliases (smbusers) and
> integrate with LDAP if desired.

Rather than bothering with trying to run a DC for your win clients at home, 
just use LDAP as the authentication store.  Visit [1] for the cool piece of 
open source authentication software for Windows clients.

First, set up LDAP to provide authentication service (and use TLS encryption, 
VERY important!) for Linux/UNIX boxes.  Then, install pGina on your windows 
boxes and configure it to use your LDAP server.  This solutions requires zero 
alterations to your LDAP setup that supports Linux authentication and works 
seamlessly for Windows.

We used it here at Guru Labs for many years without any real problems (other 
than having to wait for XP support when XP came out and the like, but the 
development was pretty quick).  We're not using it any longer as we only have 
1 windows box and our network is Kerberized.  Kerberos is another excellent 
solution, but it's a lot more work to set up.  But, it works seamlessly for 
us, too.

[1] http://www.pgina.com/
-- 
Lamont R. Peterson <lamont at gurulabs.com>
Senior Instructor
Guru Labs, L.C. [ http://www.GuruLabs.com/ ]

NOTE:  All messages from this email address should be digitally signed with my
       0xDC0DD409 GPG key. It is available on the pgp.mit.edu keyserver as
       well as other keyservers that sync with MIT's.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://sllug.org/pipermail/sllug-members/attachments/20061121/3f8cd819/attachment.pgp


More information about the sllug-members mailing list