Solaris LDAP without automount of /home/...

hi,
i need to setup an environment where users can login via ssh with their pubkey (it works fine). they are forced to execute only one command (which is in a centralized authorized_keys file on my server). user-authorization is done by ldap. my "problem" is that i do not want to have their home-directories mounted automatically. only when a user is loggin in the first time the directory should be created (or the best solution might be to have an "fake-home-dir") when users connect to the machine because there is NO need for them to have their home-dirs. on this server but i is necessary to that auth. is done by ldap!
can someone give me an advise how to realize this?

Have you tried:
Mount the directory and authenticate when asked. You should have an option to have the login info added to the users keychain.
Make an alias of the mounted share and add it to the users startup items.
Just might work....
PS If the server is not running when the user logs in, the Mac might hang....

Similar Messages

How can I switch between apps without going to home screen?

Is there anyway to switch between apps with one tap? (ie. without going to home screen first). Kind of like a command-tab feature.
Steve

Well, you can have one app that you can get to with a double push of the home button (set in settings which you want), but I think it's only your contacts list, or your ipod app. Still useful though.

Can I watch a rented movie from Itunes (iMac) on my Apple TV 3 without airplay and home sharing?

I recently download a rented movie from itunes store in my iMac. My question is, if I can watch my rented movie in my apple tv without Airplay or Home sharing? The reason is because I don't want to turn on my iMac every time that I want to watch a movie.
Thanks!

If you rented the movie from Apple TV, then you can't watch it on the iPad. The screenshot below is from Here

Can i have two internet connections connected to two airport extremes separately without disturbing the home sharing option.

can i have two internet connections connected to two airport extremes separately without disturbing the home sharing option. i want to have both the airport extremes to use a single imac for streaming music or video to my apple tv's at different places where one apple tv is in the range of one airport extreme.it's not a problem if both airport extremes have different wifi id's with separate internet.The imac which i use for streaming the music and videos is only in the range of only one airport extreme.is it possible if i can stream music or videos to my apple tv which is not in the range of same airport extreme which i use for imac but in the range of other airport extreme.
Finally what i need is i want to use two internet networks as my highest possible internet bandwidth is about 1mbps.and i know that i cant mix both the networks and make it as 2mbps.

Yes, that is possible. Please check out the following Apple Support article for details on how.

Updated to the latest revision. Firefox will not display my chosen home page without clicking on home icon.

Since latest update...Firefox will not allow a new page to be opened from a link in a current page. It will allow a new tab to be opened (with tabbed browsing checked) but i prefer a new page. Even in tabbed browsing links to things like a pdf will not work at all.
Firefox WILL NOT close. X-ing out will close the window but I can not get back to Firefox without closing it in task manager.
Firefox will not display my chosen home page without clicking on home icon.

Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

How to invoke the app by touching the screen (without using the home button)

Kindly provide the solutions for the following issues
1. How to invoke the app by touching the screen (without using the home button)
2. Estimated lifespan running an iPad3 continuously 24x7
awaiting for your valuable response.
Thanks and regards,
Sathya.

1. You can only invoke an app by touching its icon.
2. All depends on what your app does.

Proposal for a Solaris LDAP server

Does any one has or have a template or document for a proposal to create a Solaris LDAP server for upper managerment considerations.
If any please forward a copy of document to [email protected]
Thanks for any who helps....
joe

Does any one has or have a template or document for a proposal to create a Solaris LDAP server for upper managerment considerations.
If any please forward a copy of document to [email protected]
Thanks for any who helps....
joe

HT201412 Is there a way to reboot an ipod without using the home button?

My iPod touch 4th gen is unresponsive and needs a reboot, however the home button doesn't work. How can I reboot it without using the home button?

To reset the iPod without the hardware buttons,
- Reset network settings: Settings>General>Reset>Reset Network Settings. You will have to rejoin wifi networks and repair BT devices

Can I install Solaris 8 without Swap space?

Can I install Solaris 8 without swap space? or Can I install the swap space on a different hard drive?

Refer Solaris 8 installation guide manuals from this URL:
http://docs.sun.com:80/ab2/coll.214.7/@Ab2CollView?Ab2Lang=C&Ab2Enc=iso-8859-1
Thanks,
Senthilkumar
Developer Technical Support
http://www.sun.com/developers/support

Patching solaris LDAP client

i will have to patch a solaris LDAP client box. What do I expect for that? Do I have to rel-initialize the client using ldapclient command after patching?
solaris 8 + LDAP server 5.2 unbundled version.
Thanks

From previous experience if your slapd is not running on your LDAP server then your clients will not boot if they are setup for ldap domain authentication. This is the same in NIS and NIS+. The only way to bring them up is to boot -s and change the nsswitch.conf file back to standalone i.e files and reboot machine.
In short if ldap server goes down clients are too, multi ldap servers are required to prevent single point failure.

Proxy agent in solaris ldap client

Since ldap service provides naming service, that is supposed to be accessed by anyone who needs it, I don't know why we need a proxy agent when we set up solaris ldap client. The anoymous credential level is enough.
Also in order to use proxy agent, this agent needs to have at least read access to all naming entries, including userPassword, encrypted or clear-text. This adds some sort of in-security. While service authentication method "simple" will simply bind to the ldap server using provided password. Of course, you can still add another layer of security by using TLS.
So, can anyone explain this design a little more?
Thanks.

My input on this subject may seem a bit paranoid, but that's what I get paid for, so take this with a gain of salt 8-)
The proxy agent does not need to have read access to the userPassword attribute if you configure your clients to use pam_ldap instead of pam_unix. pam_unix retrieves the userPassword attribute by making a call to getspnam. With pam_ldap, the user dn and password are sent to the directory server in an auth structure, and the directory server will return success or failure to the client for that login attempt. More info on this can be found at http://docs.sun.com, or in the book "LDAP in the Solaris Operating Environment, Deploying Secure Directory Services" by Michael Hains and Tom Bialaski (ISBN 0-13-145693-8) pgs 177-179.
Use of the proxy agent can actually increase the level of security for your directory server. With the proper ACI's in place not allowing anonymous binds to view the data in the tree (or only view a small subset of the tree), you can prevent anyone from dropping a laptop or other device on your network and data mining your LDAP tree for information (ie vendors, guests, etc). That won't stop those same people from snooping the traffic on your network, so the use of secure protocols are the other side of that, but implementing tls:simple authentication for the directory server and clients is not that difficult, and should be considered for any deployment of LDAP for use as a naming server.
I do agree with your assessment that in an environment where anonymous binds are accecptable the use of the proxyagent is probably not warrented, but in my experience having the proxyagent has allowed me to tighten the security of my directory implementation .

Hardware recommendations for learning Solaris Cluster on Sparc (at home)

On a low budget, I'd like to put together a Solaris Cluster on Sparc (at home). At "work" in the next year we will be implementing a Solaris Cluster to run Tomcat and a custom CORBA server. (These apps will be migrated from very old hardware and VCS) The CORBA server is a Sparc binary, hence the need for Sparc. I'd like my home-office cluster to be similar in function to what I have at work. At work we have (2) T5120 Servers and a 2540 (2500-M2) Array waiting. From looking at the Solaris Cluster docs, it looks like you use a 2540 in a Direct-Connect configuration. We will be going to Solaris Cluster training eventually, but not soon. In the meantime, I'd like to keep/gain some skills/experience.
Potential (cheap) Home Cluster:
(2) SunFire V245 or (2) T1000 or (2) something_cheap
connected to
(1) Storedge D2 or (1) Storedge S1
My main desire, is for the interconnects and failover on this Home Cluster to behave the same way as the T5120s with the 2540 Array. Example, if I yank a HD (or replace) then I'd like it to give very similar messages to what I will face at work in the future. I'd like the creation of ZFS pools etc to work similarly. I'd like SCSI cards (HBAs or whatever) and cabling to be cheap.
Any recommendations on hardware> Servers? Arrays? SCSI Cards/cabling?
Thanks,
Scott

I settled on:
(2) Sunfire V210
Storedge 3120
Connected by VHDCI
All used equipment at a cheap price. Should be a great little testbed.

Hey I have an iPod touch 4g (without wifi at home but ethernet to one computer) and when I sync, nothing comes on my iPod. Any Ideas?

Hey I have an iPod touch 4g (without wifi at home but ethernet to one computer) and when I sync, nothing comes on my iPod. Any Ideas?

Here:
iOS: Wi-Fi or Bluetooth settings grayed out or dim
An appointment at the Genius Bar of an Apple store is usually in order.
Apple Retail Store - Genius Bar

Syncing Calendars and Contacts without the complete home folder on the server

I've been trying to set up syncing of calendars and contacts using Mavericks server. I've read a lot of posts on various ways of doing this but am at a loss as to the how the various parts of the solutions work which may be why I haven't been able to get things to work.
I've installed Server.app and got Open Directory set up. I want to sync the calendars for two users on a couple of client machines (both running Snow Leopard at the moment) and three mobile devices. The clients were set up before the server and so the user accounts are local. Putting the home folders and all the files they contain on the server is not an option as there's not enough disk space. Ideally I'd like to have all the user files on the local machines and only the data I need to sync on the server. Is this possible? All of the information I've read on migrating local users to network users suggests that their complete home folder needs to be put on the server and I've not found any way to set up the syncing successfully without making them network users.

Thanks for the answer Simon. That seems simple enough but there are some things which aren't clear.
If I create accounts on the server for the users independently (ie not ownership of the home folder) they're going to have different UID's. Surely this means that even with the same account name and password, they're going to be treated as unique users. Does that not affect who has write access? I don't know how the Calendar and Contact servers work so this may be irrelevant.
How do you "have the server host their calendar and contact details"? Copying the files for the existing local users to the new users on the server will leave them with invalid permissions.
I have read that using the Calendar and Contact components of Server.app is not a supported way of syncing across machines and that they're intended to be used for shared information rather than syncing. But maybe there is no way to avoid an "unsupported method" without moving the home folder. Is this a method you're using?
I'll do a bit of testing with this but would also be grateful for any additional hints.

Solaris ldap client + first login problem (with home user)

hi, i have autenticate my solaris 10 (6/06) clients with a ldap server (sun 1 ds 5.2) withnout TLS (in the future sure).
I test this communication with ethereal, and i think the communications its ok.
But, when my user loggin for first time, he havent got a home directory, (in linux clients (fedoras) i configure pam and gdm to do this -with a kde desktop-), but here in solaris i dont know how to made this.
i have this problem (in a root session with entry "toto1" in dit)
# su - toto1
su: No directory!
I set (for toto1 entry) in attributte homedirectory in objectclass posixAccount a value "/home/toto1".
�How and how have the responsabilities to make home directories?
�the solution are like "linux solution", and if this is true, what files i must to touch for java desktop or cde?
Thanks!!!

One minute...!! How you made it work?I too have fedora DS Configured and want to configure Solaris Client.The #getent and #-ldaplist is displaying correct but login is now working.I guess PAM issue?how you resolved??

Solaris LDAP without automount of /home/...

Similar Messages

Maybe you are looking for