Re: [Samba] Re: [SLE] Any way to do Linux User home directories via Samba

2003-09-09 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 Message: 15
 Date: Mon, 08 Sep 2003 09:29:41 -0500
 From: Jason Joines [EMAIL PROTECTED]
Subject: [Samba] Re: [SLE] Any way to do Linux User home directories
via Samba
 To: [EMAIL PROTECTED]
 Message-ID: [EMAIL PROTECTED]
 Content-Type: text/plain; charset=ISO-8859-1; format=flowed
 Sébastien Taylor wrote:

 The way we handle this at my office is by sharing over samba to the
 windows clients, and by nfs to the linux clients.  The nfs exports the
 same data as smb so it's identical, but nfs is better suited for unix.

 Jason Joines a écrit:


   All of our user authentication is done via LDAP.  We have an all
 Linux backend and tons of windows desktops.  We've just started
getting
 a few people to move to Linux on the desktop.  Is there any way that I
 can have their home directory automatically mounted via Samba when
they
 log in?

The problem isn't monting the home directories (this can be done easily
with pam_mount, assuming the LDAP password and samba password are in
sync). The problem is that you can't start KDE with smbfs/cifs-mounted
home directories, and although you can get GNOME working, gconf is
broken (which may also break font display). Other less advanced
desktops, such as WindowMaker, fluxbox etc do work ok though (even
mozilla runs fine).

Maybe someone else has got KDE/GNOME to work with smbfs/cifs-mounted homes?


 Thanks,

 Jason Joines
 Open Source = Open Mind
 

   I use NFS for my Linux desktop.  However, our users have root access
 to their desktops and I'm concerned about the security of the server in
 that situation.

Well, don't give them root access on their desktops. They should never
need it, and if they do need to run certain things as root, you should
setup sudo instead. There are way too many issues with users having
root, NFS is only one problem.

Store automount maps in your LDAP server, and NFS becomes trivial to use
(no client side configuration needed).

Regards,
Buchan

- --
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/XbkarJK6UGDSBKcRAmbmAKCoo70/2iGoRvxhpecDHltB1GZ2YwCfS2Os
1OTVFpBkR/q1uyWsqSZxz6A=
=Iimc
-END PGP SIGNATURE-

*
Please click on http://www.cae.co.za/disclaimer.htm to read our
e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy.
*
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: [SLE] Any way to do Linux User home directories via Samba

2003-09-08 Thread Jason Joines
Sébastien Taylor wrote:

The way we handle this at my office is by sharing over samba to the 
windows clients, and by nfs to the linux clients.  The nfs exports the 
same data as smb so it's identical, but nfs is better suited for unix.

Jason Joines a écrit:

  All of our user authentication is done via LDAP.  We have an all
Linux backend and tons of windows desktops.  We've just started getting
a few people to move to Linux on the desktop.  Is there any way that I
can have their home directory automatically mounted via Samba when they
log in?
Thanks,

Jason Joines
Open Source = Open Mind
 



 I use NFS for my Linux desktop.  However, our users have root access
to their desktops and I'm concerned about the security of the server in
that situation.  I no I can squash root but if the user can create a
local user with the same numeric userid as some other user, they could
then use that local account to access someone else's files on the NFS
server.
 Maybe I just don't know how to set up the export properly.  I also
like Samba better since I can open up just one port to the client.
Jason
===
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba