Difference between revisions of "Client Authentication:Ubuntu"

From SME Server
Jump to navigationJump to search
Line 1: Line 1:
 
{{Incomplete}}
 
{{Incomplete}}
 
{{Warning box| This is based upon limited testing and a small number of users via a VirtualBox virtual machine installation of Ubuntu 9.10. YMMV}}
 
{{Warning box| This is based upon limited testing and a small number of users via a VirtualBox virtual machine installation of Ubuntu 9.10. YMMV}}
 
+
{{Note box| If your reading this then this page is incomplete. Don't follow the instructions below because they haven't been verified}}
 
==Ubuntu 9.10 Authentication==
 
==Ubuntu 9.10 Authentication==
 
===Introduction===
 
===Introduction===
Line 17: Line 17:
 
===Authentication Modifications===
 
===Authentication Modifications===
 
{{Warning box| Altering the pam system authentication files can seriously effect your ability to login in to the system. Take a backup of the /etc/pam.d directory and /etc/nsswitch.conf. Have a live CD available to give access and re-apply the backup files if you make a mistake and/or get locked out}}
 
{{Warning box| Altering the pam system authentication files can seriously effect your ability to login in to the system. Take a backup of the /etc/pam.d directory and /etc/nsswitch.conf. Have a live CD available to give access and re-apply the backup files if you make a mistake and/or get locked out}}
 +
 +
Open a Terminal cli and change to root privileges
 +
sudo su
 +
 +
Using your favourite editor, open /etc/nsswitch.conf and find the hosts: line. Change it to
 +
hosts: file wins dns
 +
 +
Change to the auth-client-config tool profile directory
 +
cd /etc/auth-client-config/profile.d
 +
 +
Using your favourite editor create a new file called acc-sme and enter
 +
[sme]
 +
users: compat winbind
 +
passwd: compat winbind
 +
shadow: compat
 +
 +
Save and apply the pam authorisation changes
 +
auth-client-config -a -p sme
 +
 +
=== Automount User Home Directories at Login===

Revision as of 11:57, 5 November 2009

Incomplete.png Incomplete:
This article or section needs to be expanded. Please help to fill the gaps or discuss the issue on the talk page


Warning.png Warning:
This is based upon limited testing and a small number of users via a VirtualBox virtual machine installation of Ubuntu 9.10. YMMV


Important.png Note:
If your reading this then this page is incomplete. Don't follow the instructions below because they haven't been verified


Ubuntu 9.10 Authentication

Introduction

The following details the setup of Ubuntu 9.10 Karmic Koala as a desktop to authenticate users against SME. The method has been tested using Ubuntu installed in a VirtualBox virtual machine on a Windows XP host.

Install Ubuntu

Download the Ubuntu .iso and install. When prompted for a user name give a non-SME user such as administrator as this first user effectively becomes a local user with sudo root access. Complete install, login and apply all updates.

Additional Packages

Use the package manager to install additional packages

auth_client_config
winbind

Authentication Modifications

Warning.png Warning:
Altering the pam system authentication files can seriously effect your ability to login in to the system. Take a backup of the /etc/pam.d directory and /etc/nsswitch.conf. Have a live CD available to give access and re-apply the backup files if you make a mistake and/or get locked out


Open a Terminal cli and change to root privileges

sudo su

Using your favourite editor, open /etc/nsswitch.conf and find the hosts: line. Change it to

hosts: file wins dns

Change to the auth-client-config tool profile directory

cd /etc/auth-client-config/profile.d

Using your favourite editor create a new file called acc-sme and enter

[sme]
users: compat winbind
passwd: compat winbind
shadow: compat

Save and apply the pam authorisation changes

auth-client-config -a -p sme

Automount User Home Directories at Login