Novell client for linux - scripted install and configure

Question

the novell client is included in SLED11 SP1
the configuration files are in /etc/opt/novell/ncl (esp login.conf)
I want to script the configuration of the novell-client. Some of the things the interface yast - Novell client does, is:
modify /etc/pam.d/gdm
create /lib/security/pam_ncl_autologin.so
... and maybe more....?
according to Novell Documentation there should be a make_novell-client-conf_rpm Bash script but i cant find it in any of the recent clients (download) nor on the SLED installation.
I think just copying pam.d files and the .so file will work, but might cause troubles in the long run.
What should i do to create these by script?

Answer 1

Originally Posted by lowalcohol
assuming this will do the same as installing it from yast - software, the client is not configured (tree, context, slp) and lacks key files such as /lib/security/pam_ncl_autologin.so needed for integrated login.
/lib/security/pam_ncl_autologin.so is updated by the post processing inside the rpm's. We don't need to do anything. however there is much to do. i'll show what i do. You need to change the variables and entries to suit your env.
create a repo on a build server using the following in fstab
Code:
/srv/www/htdocs/iso/novell-client-2.0-sp2-p2-sle11-i586.iso /srv/www/htdocs/novcli2.sp2/i586 iso9660 user,auto,loop,uid=30,gid=8 0 0
/srv/www/htdocs/iso/novell-client-2.0-sp2-p2-sle11-x86_64.iso /srv/www/htdocs/novcli2.sp2/x86_64 iso9660 user,auto,loop,uid=30,gid=8 0 0
add a repo to the install
zypper -n ar --refresh http://build/novcli2.sp2/$PROC "Novell client 2"
add in bits for ldap
Code:
cd /tmp
wget $WEBPATH/ldap.tbz2
if [ -s ldap.tbz2 ]; then
cd /
tar xjvf /tmp/ldap.tbz2
cd /tmp
fi # if [ -s ldap.tbz2 ];
echo '+::::::' >>/etc/passwd
echo '+' >>/etc/shadow
echo '+:::' >>/etc/group
ldap.tbz2 contains the following after they been changed by 'yast ldap'.
\etc
\etc\ldap.conf
\etc\nsswitch.conf
\etc\openldap
\etc\pam.d
\etc\openldap\ldap.conf
\etc\pam.d\common-account-pc
\etc\pam.d\common-auth-pc
\etc\pam.d\common-password-pc
\etc\pam.d\common-session-pc
add in the client
Code:
zypper --no-refresh --no-gpg-checks -n in -l -t pattern novell-ncl
#lock the files to protect them from future 'zypper dup'
zypper al nici64 novell-client novell-client-script novell-konqueror-plugin novell-nautilus-plugin novell-nmasclient novell-novfsd novell-qtgui novell-ui-base novell-xplatlib novell-xtier-base novell-xtier-core novell-xtier-xplat yast2-novell-client
chkconfig micasad on
configure the client
[CODE]
sed -i s/";net.slp.useScopes.*"/"net.slp.useScopes = FRED, LARRY"/ /etc/slp.conf
sed -i s/";net.slp.DAAddresses.*"/"net.slp.DAAddresses = 10.251.1.99, 10.249.1.99"/ /etc/slp.conf
mkdir -p /etc/opt/novell/ncl
echo Allow_Integrated_Login=true >/etc/opt/novell/ncl/login.conf
echo Default_Tree=XXXXX >>/etc/opt/novell/ncl/login.conf
echo Default_Context=XXX.XXX.XXX >>/etc/opt/novell/ncl/login.conf
echo Default_Server=servername >>/etc/opt/novell/ncl/login.conf
echo DHCP_Tree=true >/etc/opt/novell/ncl/protocol.conf
echo DHCP_Server=true >>/etc/opt/novell/ncl/protocol.conf
[CODE]
(reboot)
These are files installed during build stage, but are used when the client logs in.
in /etc/skel/.novell/ncl, i have a copy of StartupLogin.conf as StartupLogin.conf.new
this file has information in it, but it will be wiped.
in /etc/skel/.kde4/Autostart/logon.sh, i have
Code:
if [ ! ~/.novell/ncl/StartupLogin.conf.new ]; then
mv ~/.novell/ncl/StartupLogin.conf.new ~/.novell/ncl/StartupLogin.conf
FDN=`ldapsearch -x -h 10.251.1.99 -b ou=its,o=fca | grep -i 'dn:' | grep -i $USER | grep -iv workstation`
CONTEXT=`echo $FDN | cut -d, -f2- | sed -e 's/ou=//ig' -e 's/o=//ig' -e 's/,/./ig'`
sed -i "s/UserName.*/UserName = $USER/" ~/.novell/ncl/StartupLogin.conf
sed -i "s/FDN.*/FDN = $FDN/" ~/.novell/ncl/StartupLogin.conf
sed -i "s/Context.*/Context = $CONTEXT/" ~/.novell/ncl/StartupLogin.conf
sudo /bin/update_login.conf.sh $CONTEXT
fi # if [ ! ~/.novell/ncl/StartupLogin.conf.new ];
/bin/update_login.conf.sh has the following and has '%users ALL=(root) NOPASSWD:/bin/update_login.conf.sh' added to /etc/sudoers
Code:
if [ ! -z "$1" ];then
sed -i "s/Default_Context=.*/Default_Context=$1/" /etc/opt/novell/ncl/login.conf
fi
So far this is working well.
The novell login needs to be run once, and on the advanced tab, have the session saved. This then auto runs afterwards for each logon.
as a troubleshooting tool, I :
Code:
cp /etc/etc.1
rsync -avP etc* my-pc:/tmp/
i can then use krusader to compare files (on my-pc), but most importantly, after doing something (eg yast ldap). rerun the rsync line and and it will tell exactly which file(s) changed, so you know which ones to check/keep/alter/etc
hope this helps.
ph