Centos Linux Client Help Needed

Question

Hi,
Does anyone have a clear guide to setting up Centos Linux clients to use the same home folders and authentication as mac and MS Windows clients on Tiger Server please.
I have tried the LDAP tool in centos and put dc=myserver,dc=mydomain,dc=co,dc=uk in but it doesnt seem to authenticate at all, is there some other settings server side or some cn= parts I may need to add to the LDAP settings. If there is wheres the best place to obtain that info from the server?
I really would like this to be possible so I can replace the classroom windows machines with a thin client centos solution.
Many thanks

Answer 1

PsyMan wrote:
Hi,
Does anyone have a clear guide to setting up Centos Linux clients to use the same home folders and authentication as mac and MS Windows clients on Tiger Server please.
I have tried the LDAP tool in centos and put dc=myserver,dc=mydomain,dc=co,dc=uk in but it doesnt seem to authenticate at all, is there some other settings server side or some cn= parts I may need to add to the LDAP settings. If there is wheres the best place to obtain that info from the server?
I really would like this to be possible so I can replace the classroom windows machines with a thin client centos solution.
Many thanks
Hi Psyman,
we have a couple of servers running CentOS and authenticating their users against OD. Homes are mounted via nfs, though it shouldn't be a problem to do it via samba.
We have the client side as well the server side documented quite well I'd say, in a crude mixture of english and german though.
should you be interested in the whole thing or need help, mail me, fke at kesslernetworks dot de
Regards, Florian
Here's the extract of what we do -via script- to our servers to 'join' them...
cat << EOF > /etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = OEW.DE
dnslookuprealm = false
dnslookupkdc = false
[realms]
OEW.DE = {
kdc = od1.oew.de:88
admin_server = od1.oew.de:749
default_domain = od1.oew.de
[domain_realm]
.od1.oew.de = OEW.DE
od1.oew.de = OEW.DE
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
EOF
cat << EOF > /etc/krb.conf
OEW.DE
OEW.DE od1.oew.de
OEW.DE od1.oew.de admin server
EOF
cat << EOF > /etc/nsswitch.conf
passwd: files ldap
shadow: files ldap
group: files ldap
hosts: files dns
bootparams: files
ethers: files
netmasks: files
networks: files
protocols: files ldap
rpc: files
services: files ldap
netgroup: files ldap
publickey: files
automount: files ldap
aliases: files
EOF
cat << EOF > /etc/ldap.conf
host od1.oew.de
base cn=users,dc=oew,dc=de
nssbasegroup cn=groups,dc=oew,dc=de
timelimit 120
bind_timelimit 120
idle_timelimit 3600
ssl no
tls_cacertdir /etc/openldap/cacerts
pam_password md5
EOF
cat << EOF > /etc/pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required /lib/security/\$ISA/pam_env.so
auth sufficient /lib/security/\$ISA/pam_unix.so likeauth nullok
auth sufficient /lib/security/\$ISA/pam_krb5.so usefirstpass
auth required /lib/security/\$ISA/pam_deny.so
account required /lib/security/\$ISA/pam_unix.so broken_shadow
account sufficient /lib/security/\$ISA/pamsucceedif.so uid < 100 quiet
account [default=bad success=ok user_unknown=ignore] /lib/security/\$ISA/pam_krb5.so
account required /lib/security/\$ISA/pam_permit.so
password requisite /lib/security/\$ISA/pam_cracklib.so retry=3
password sufficient /lib/security/\$ISA/pam_unix.so nullok use_authtok md5 shadow
password sufficient /lib/security/\$ISA/pam_krb5.so use_authtok
password required /lib/security/\$ISA/pam_deny.so
session required /lib/security/\$ISA/pam_limits.so
session required /lib/security/\$ISA/pam_unix.so
session optional /lib/security/\$ISA/pam_krb5.so debug
EOF
cat << EOF >> /etc/fstab
# user dirs per nfs
od1.oew.de:/Users /Network/Servers/od1.oew.de/Users nfs rw,hard,intr 0 0
filesrv1.oew.de:/Volumes/xraid1/shares/Users /Network/Servers/filesrv1.oew.de/Volumes/xraid1/shares/Users nfs rw,hard,intr 0 0
EOF
mkdir -p /Network/Servers/od1.oew.de/Users
mkdir -p /Network/Servers/filesrv1.oew.de/Volumes/xraid1/shares/Users
mount -a
chkconfig netfs on