Re: [DNG] Implementing directory services/Kerberos

2018-11-12 Thread Martin Steigerwald
wirelessd...@gmail.com - 12.11.18, 01:26: > On Fri, 9 Nov 2018 at 17:20, Martin Steigerwald wrote: > > Héctor González - 09.11.18, 00:02: > > > >> Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): […] > > Or use sssd, in case it can be installed without pulling libsystemd0 > > / systemd.

Re: [DNG] Implementing directory services/Kerberos

2018-11-11 Thread Rick Moen
Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > nslcd appears to be working fine here now. I don't think I need to > fiddle with any nscd settings at this point in time. nscd is a cache for (a configuable subset of) numerous types of names, including /etc/passwd, /etc/group,

Re: [DNG] Implementing directory services/Kerberos

2018-11-11 Thread wirelessduck
On Fri, 9 Nov 2018 at 17:20, Martin Steigerwald wrote: > > Héctor González - 09.11.18, 00:02: > > >> Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > > > [snip] > > > > > >>> So my next question is, whats the recommended package to > > >>> authenticate > > >>> with LDAP and allow users

Re: [DNG] Implementing directory services/Kerberos

2018-11-11 Thread wirelessduck
On Fri, 9 Nov 2018 at 10:02, Héctor González wrote: > > > >> Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > > [snip] > >>> So my next question is, whats the recommended package to authenticate > >>> with LDAP and allow users to login to a desktop via their LDAP > >>> account? I've

Re: [DNG] Implementing directory services/Kerberos

2018-11-11 Thread wirelessduck
On Sat, 10 Nov 2018 at 15:45, Rick Moen wrote: > > Quoting H??ctor Gonz??lez (ca...@genac.org): > > > There is also nslcd, which I remember using with samba-ad, as nscd > > didn´t like that ldap for some reason, and it has a different > > config file /etc/nslcd.conf > > > > I´d use nscd first,

Re: [DNG] Implementing directory services/Kerberos

2018-11-09 Thread Rick Moen
Quoting H??ctor Gonz??lez (ca...@genac.org): > There is also nslcd, which I remember using with samba-ad, as nscd > didn´t like that ldap for some reason, and it has a different > config file /etc/nslcd.conf > > I´d use nscd first, and if you run into trouble try nslcd. Again, back when I

Re: [DNG] Implementing directory services/Kerberos

2018-11-09 Thread Martin Hodges
Hi All, > >> Quoting wirelessduck@??? (wirelessduck@???): > > [snip] > > > >>> So my next question is, whats the recommended package to > >>> authenticate > >>> with LDAP and allow users to login to a desktop via their LDAP > >>> account? I've seen various options for PAM and NSS, but do I need >

Re: [DNG] Implementing directory services/Kerberos

2018-11-08 Thread Martin Steigerwald
Héctor González - 09.11.18, 00:02: > >> Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > > [snip] > > > >>> So my next question is, whats the recommended package to > >>> authenticate > >>> with LDAP and allow users to login to a desktop via their LDAP > >>> account? I've seen various

Re: [DNG] Implementing directory services/Kerberos

2018-11-08 Thread Héctor González
Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): [snip] So my next question is, whats the recommended package to authenticate with LDAP and allow users to login to a desktop via their LDAP account? I've seen various options for PAM and NSS, but do I need to configure both or just

Re: [DNG] Implementing directory services/Kerberos

2018-11-08 Thread Rick Moen
Quoting Rowland Penny (rpe...@samba.org): > I will say it again (and yes, I might be biased here) A samba AD DC > will do all of the above without all of the complexity of setting up > LDAP and then extending it to just install users and groups. Very good point, Rowland. The constraints my

Re: [DNG] Implementing directory services/Kerberos

2018-11-08 Thread Rowland Penny
On Thu, 8 Nov 2018 11:12:16 -0800 Rick Moen wrote: > Redirecting back on-list. > > Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > > > On Mon, 3 Sep 2018 at 13:47, Rick Moen wrote: > > > > > > Anyway, it's been a _long_ time since I dealt with all of that > > > badness, so I'm

Re: [DNG] Implementing directory services/Kerberos

2018-11-08 Thread Lars Noodén
On 11/8/18 9:12 PM, Rick Moen wrote: > Redirecting back on-list. > > Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): [snip] >> So my next question is, whats the recommended package to authenticate >> with LDAP and allow users to login to a desktop via their LDAP >> account? I've seen

Re: [DNG] Implementing directory services/Kerberos

2018-11-08 Thread Rick Moen
Redirecting back on-list. Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > On Mon, 3 Sep 2018 at 13:47, Rick Moen wrote: > > > > Anyway, it's been a _long_ time since I dealt with all of that badness, > > so I'm probably forgetting a lot. This looks like a decent starting > > point:

Re: [DNG] Implementing directory services/Kerberos

2018-11-08 Thread Rowland Penny
On Thu, 8 Nov 2018 12:04:53 +1100 wirelessd...@gmail.com wrote: > On Mon, 3 Sep 2018 at 17:37, Rowland Penny wrote: > > > > On Mon, 3 Sep 2018 10:34:50 +1000 > > wirelessd...@gmail.com wrote: > > > > > I’m looking to setup some sort of directory services/network > > > authentication for users on

Re: [DNG] Implementing directory services/Kerberos

2018-09-03 Thread hal
On September 2, 2018 7:34:50 PM CDT, wirelessd...@gmail.com wrote: :: I’m looking to setup some sort of directory services/network :: authentication for users on a small corporate network running Devuan :: Ascii. Is it recommended to use Kerberos+LDAP? :: :: Are there any good tutorials out there

Re: [DNG] Implementing directory services/Kerberos

2018-09-03 Thread Rowland Penny
On Mon, 3 Sep 2018 10:34:50 +1000 wirelessd...@gmail.com wrote: > I’m looking to setup some sort of directory services/network > authentication for users on a small corporate network running Devuan > Ascii. Is it recommended to use Kerberos+LDAP? > > Are there any good tutorials out there for

Re: [DNG] Implementing directory services/Kerberos

2018-09-02 Thread Bruce Ferrell
On 09/02/2018 08:47 PM, Rick Moen wrote: Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): I’m looking to setup some sort of directory services/network authentication for users on a small corporate network running Devuan Ascii. Is it recommended to use Kerberos+LDAP? Heh, a bit over

Re: [DNG] Implementing directory services/Kerberos

2018-09-02 Thread Rick Moen
Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > I’m looking to setup some sort of directory services/network authentication > for users on a small corporate network running Devuan Ascii. Is it > recommended to use Kerberos+LDAP? Heh, a bit over ten years ago, I designed a full-blown