samba - Feb 2003 - Linux as an AD Client questions

Hello --

I'm trying to come up with a seamless way for our Red Hat 8  ( and 
eventually, Mac OS X ) users to access network resources that are shared 
via our Active Directory.  I'm having a very rough time figuring out 
exactly how to approach this. 

Our requirements (ie, pie in the sky wish list) are:

1. when logging on to Gnome/KDE via gdm, users must be able to use their 
AD credentials
2. Users must have their home directory from Windows mounted as their 
Linux home directory
3. passwords should remain in sync


Items 1 & 3 can be accomplished via winbind and pam.  I'm not too 
worried about that.  But it's item 2 that is the sticky one.  Is there 
something I'm missing in smbclient or the smbfs kernel support that 
could somehow pass the login credentials that the machine has received 
through winbind/pam to mount a directory?

I've even thought about setting up some sort of gateway machine running 
Samba 3 that is a member of the AD and mounts all the home directories 
and re-shares them, but this seems really, really kludgy.

Is this something that samba can accomplish, or am I barking up the 
wrong tree?

Regards and Thanks,

Aaron Bennett
UNIX Administrator
Franklin W. Olin College of Engineering
abennett@olin.edu

On Wed, 2003-02-05 at 07:37, Aaron Bennett wrote:
> Hello --
> 
> I'm trying to come up with a seamless way for our Red Hat 8  ( and 
> eventually, Mac OS X ) users to access network resources that are shared 
> via our Active Directory.  I'm having a very rough time figuring out 
> exactly how to approach this. 
> 
> Our requirements (ie, pie in the sky wish list) are:
> 
> 1. when logging on to Gnome/KDE via gdm, users must be able to use their 
> AD credentials
> 2. Users must have their home directory from Windows mounted as their 
> Linux home directory
> 3. passwords should remain in sync
> 
> 
> Items 1 & 3 can be accomplished via winbind and pam.  I'm not too 
> worried about that.  But it's item 2 that is the sticky one.  Is there 
> something I'm missing in smbclient or the smbfs kernel support that 
> could somehow pass the login credentials that the machine has received 
> through winbind/pam to mount a directory?
pam_mount.  I have seen reports of it being hacked up to function
correctly.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20030205/477bdc3b/attachment.bin