authentication of users on openSuse11 server

English Network/Internet
#1

Hi again…just wanted to know…,.suppose i had a network all set up and required a central server running openSUSE 11,
how do i authenticate users that connect to it on my network and
how do i enable them to store and share files on it?? this is assuming the client machines were operating on XP and Vista …

5 points for a simple answer on whether its possible :|,
10 points for an answer and redirection to a proper site :slight_smile: and
20 points for explaining it in such BASIC SIMPLE TERMS that even an idiot like me can understand rotfl!

PS
just thought I would make answering queries from no hopers like me a little fun…:lol!

#2

There is no simply answer, at the lowest common dominator you have the simple login, ssh, or even finely grained ACL’s, remote logins. Then I’m not to sure but you may even be able to get some kind of control using app-armor profiles(You’d have to investigate)

ACL’s also man Access control list - Wikipedia, the free encyclopedia
AppArmor Detail - openSUSE

No true login Samba mounts which iirc will give you some user control. Linux HOWTOs and Tutorials: Suse Linux 10.0, 10.1 openSUSE 10.2, 10.3, 11.0, 11.1

Full blown solutions ndis or ldap, brief examples here NIS : Linux central authentication NIS : Linux central authentication Howto LDAP server - openSUSE

Then are we looking at proxy control/caching/filtering are you having a web server etc… squid/squid guard, then if a website are you using a fall back, who is managing dns, wireless etc etc etc…

You have yet to really map out your network, you have so many questions but first you have to have a plan with which services you wish to serve, then solutions can be given.

I mean you have mail servers is this centralised are you sticking to the ms way then you may find there is only way or you may find that what you hoped for wasn’t so easy therefore mail may become more generic way.

You’ve given no idea of the material you wish to serve to the clients, whether thin or fat with/without shares, backup policy etc etc etc etc … Then we’ve not even touched linux to linux and nfs NFS - openSUSE

Then not to forget sometimes where you pull the solution maybe a push.

And then to really throw a spanner in the works you have virtulisation vmware/xen.

Open up your favourite drawing program


              Services
                  | 
           |----- | ------|
Services---     Sever      ---Services
           |----- | ------|
                  | 
              Services

Google wiki is your friend but first map out the network.

Think you have some research and a little mapping to do before the next round of questions.

#3

I’m managing a network like that with 5 XP, 1 Vista and about 20 openSUSE clients. When the previous server (on SUSE 9.3 Pro) died, I bouhgt a new one within an hour, 2 hours later the network was up and running again, So yes, to get the first 5 points.
The **site: **opensuse.org and localhost . openSUSE comes with tons of manuals, the site has a wiki with lots of HOWTO’s on matters like this, which brings me to a total of 15 points
For Windows clients we have SAMBA. You can install it through the software-installer, install yast packages for samba as well.
The clients will see your openSUSE server as they see other Windows-computers on the network, the users have to exist on the server as users and as samba-users. In SAMBA you can configure which partitions/folders should be shared for all users or groups of users. The clients can attach the shares as network folders or drives. SAMBA can act as a primary domain controller as well.

Considering linux clients: I’ve setup the server to act as a NIS-server, the clients run NIS-client. This makes that users only exist in one place, i.e. the server. Furthermore it runs NFS-server to export /home and the shares. The openSUSE clients connect to the network authenticating via NIS, the NFS-client mounts the exports during boot.

The Windows-clients are all configured to have their ‘My Documents’ in their linux /home , Thunderbird and Firefox profiles idem.
In fact they can log in on any machine, any OS, they allways have their own desktop background.

Where am I now? 52 points ?

#4

Very nice…I think you alredy hit 60 points…any more tips that you have that might get you to 100??..:wink:

#5

ohh OK…for an extra 30points…do i really have to know the command lines :frowning: really well or is there a GUI that can help me out?..
Cheers

#6

Why not use the command line?

It is faster and a lot more powerful than GUI, you just have to get used to it.

Start getting familiar with the command line, you will not regret it.

#7

On Wed March 18 2009 10:26 am, iliapi wrote:

>
> Hi again…just wanted to know…,.suppose i had a network all set up and
> required a central server running openSUSE 11,
> how do i authenticate users that connect to it on my network and
> how do i enable them to store and share files on it?? this is assuming
> the client machines were operating on XP and Vista …
>
> 5 points for a simple answer on whether its possible :|,
> 10 points for an answer and redirection to a proper site :slight_smile: and
> 20 points for explaining it in such BASIC SIMPLE TERMS that even an
> idiot like me can understand rotfl!
>
> PS
> just thought I would make answering queries from no hopers like me a
> little fun…:lol!
>
>
iliapi;
Look at the HowTos located here for help on setting up Samba with simple
workgroup file/print sharing:
http://www.swerdna.net.au/linux.html

If you require a full blown domain with roaming profiles and central login, I
would suggest this HowTo in addition to the above:
http://www.pcc-services.com/sles/samba2.html

The above is written for SLES but with minor modification should serve for
openSUSE.

P. V.
“We’re all in this together, I’m pulling for you.” Red Green

#8

Thanks…but can you give me or at least redirect me to a some sites that might help me with command lines that i may need.The most impotant things that i need my server to do is authorize and authenticate users when they logon in from their Windows machines as well as create folders where they can store and access their data.:slight_smile: