On 12/19/2010 11:58 AM, Jaap Winius wrote: > Quoting Jeffrey Altman <[email protected]>: > >> OpenLDAP is not a replacement for Active Directory. You either need to >> manage local Windows accounts that are mapped to Kerberos identities for >> logon or you need to use Active Directory (or an Active Directory >> equivalent) to manage the accounts for you. >> >> In either case, once you have accounts defined for users those accounts >> can have roaming profiles stored in AFS. > > Quoting Lars Schimmer <[email protected]>: > >> Sure it is. Just enter the path to the profile like >> \\AFS\cgv.tugraz.at\home\user\winprofile >> and enable "pbtain tokens at login" for the workstation. >> Be sure for AD server can access the path to the user profile (l ACL >> should be enough). ... > > Okay, it sounds like Active Directory would be the best solution. > However, seeing as this is strictly an Open-Source project (apart from > those few Windows clients running a couple of proprietary apps), I would > not be able to use any Windows servers for that. I guess it would have > to be Samba. Still doable?
Samba 4 is not production quality yet. When it is, it can be used as an AD replacement.
signature.asc
Description: OpenPGP digital signature
