Thanks! That's exactly what I was looking for. Nico On Mon, Dec 7, 2015 at 11:57 AM, L.P.H. van Belle <belle at bazuin.nl> wrote:> Hai Nico, > > Yes, you can do the same for linux laptops. > Read : https://wiki.samba.org/index.php/PAM_Offline_Authentication > > And here is an example. > > https://www.clearos.com/resources/documentation/clearos/content:en_us:kb_howtos_add_linux_workstation_to_the_samba_domain > > Greetz, > > Louis > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Nico De Ranter > > Verzonden: maandag 7 december 2015 11:39 > > Aan: samba at lists.samba.org > > Onderwerp: [Samba] Caching user accounts on a Linux portable > > > > I'm setting up a new Samba-based AD domain. The domain will be used to > > authenticate access to both Windows and Linux desktops and portables. > > When > > a Windows portable is not able to access the AD servers (e.g. you are > > using > > a portable outside of the office) you can still happily logon using > > cached > > credentials (as long as the user logged on the pc at least once before). > > Is there a way to get the same behaviour on Linux? I want my > linux-laptop > > users to be able to logon to their laptops even if they are not > connected > > to the network. I know I can add local accounts to /etc/passwd but that > > kind of defeats the purpose of setting up an AD domain. > > > > Nico > > > > > > -- > > Nico De Ranter > > > > Operations Engineer > > <http://www.esaturnus.com> >-- Nico De Ranter Operations Engineer T. +32 16 40 12 82 M. +32 497 91 53 78 <http://www.esaturnus.com> <http://www.esaturnus.com> eSATURNUS Romeinse straat 12 3001 Leuven – Belgium T. +32 16 40 12 82 F. +32 16 40 84 77 www.esaturnus.com <http://www.esaturnus.com/company/news/313> <http://www.esaturnus.com/>
In case of... SSSD comes also with a caching method. Using SSSD rather than Winbind could help in certain cases... 2015-12-07 13:00 GMT+01:00 Nico De Ranter <nico.deranter at esaturnus.com>:> Thanks! That's exactly what I was looking for. > > Nico > > > > On Mon, Dec 7, 2015 at 11:57 AM, L.P.H. van Belle <belle at bazuin.nl> wrote: > > > Hai Nico, > > > > Yes, you can do the same for linux laptops. > > Read : https://wiki.samba.org/index.php/PAM_Offline_Authentication > > > > And here is an example. > > > > > https://www.clearos.com/resources/documentation/clearos/content:en_us:kb_howtos_add_linux_workstation_to_the_samba_domain > > > > Greetz, > > > > Louis > > > -----Oorspronkelijk bericht----- > > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Nico De > Ranter > > > Verzonden: maandag 7 december 2015 11:39 > > > Aan: samba at lists.samba.org > > > Onderwerp: [Samba] Caching user accounts on a Linux portable > > > > > > I'm setting up a new Samba-based AD domain. The domain will be used to > > > authenticate access to both Windows and Linux desktops and portables. > > > When > > > a Windows portable is not able to access the AD servers (e.g. you are > > > using > > > a portable outside of the office) you can still happily logon using > > > cached > > > credentials (as long as the user logged on the pc at least once > before). > > > Is there a way to get the same behaviour on Linux? I want my > > linux-laptop > > > users to be able to logon to their laptops even if they are not > > connected > > > to the network. I know I can add local accounts to /etc/passwd but > that > > > kind of defeats the purpose of setting up an AD domain. > > > > > > Nico > > > > > > > > > -- > > > Nico De Ranter > > > > > > Operations Engineer > > > <http://www.esaturnus.com> > > > > > -- > Nico De Ranter > > Operations Engineer > > T. +32 16 40 12 82 > > M. +32 497 91 53 78 > > > <http://www.esaturnus.com> > > > > <http://www.esaturnus.com> > > eSATURNUS > Romeinse straat 12 > 3001 Leuven – Belgium > > T. +32 16 40 12 82 > F. +32 16 40 84 77 > www.esaturnus.com > > > <http://www.esaturnus.com/company/news/313> > > > > <http://www.esaturnus.com/> > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
I tried using sssd but I couldn't get it working based on the info on https://wiki.samba.org/index.php/Sssd I may give it another go anyway. Nico On Mon, Dec 7, 2015 at 1:24 PM, mathias dufresne <infractory at gmail.com> wrote:> In case of... SSSD comes also with a caching method. Using SSSD rather than > Winbind could help in certain cases... > > 2015-12-07 13:00 GMT+01:00 Nico De Ranter <nico.deranter at esaturnus.com>: > > > Thanks! That's exactly what I was looking for. > > > > Nico > > > > > > > > On Mon, Dec 7, 2015 at 11:57 AM, L.P.H. van Belle <belle at bazuin.nl> > wrote: > > > > > Hai Nico, > > > > > > Yes, you can do the same for linux laptops. > > > Read : https://wiki.samba.org/index.php/PAM_Offline_Authentication > > > > > > And here is an example. > > > > > > > > > https://www.clearos.com/resources/documentation/clearos/content:en_us:kb_howtos_add_linux_workstation_to_the_samba_domain > > > > > > Greetz, > > > > > > Louis > > > > -----Oorspronkelijk bericht----- > > > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Nico De > > Ranter > > > > Verzonden: maandag 7 december 2015 11:39 > > > > Aan: samba at lists.samba.org > > > > Onderwerp: [Samba] Caching user accounts on a Linux portable > > > > > > > > I'm setting up a new Samba-based AD domain. The domain will be used > to > > > > authenticate access to both Windows and Linux desktops and portables. > > > > When > > > > a Windows portable is not able to access the AD servers (e.g. you are > > > > using > > > > a portable outside of the office) you can still happily logon using > > > > cached > > > > credentials (as long as the user logged on the pc at least once > > before). > > > > Is there a way to get the same behaviour on Linux? I want my > > > linux-laptop > > > > users to be able to logon to their laptops even if they are not > > > connected > > > > to the network. I know I can add local accounts to /etc/passwd but > > that > > > > kind of defeats the purpose of setting up an AD domain. > > > > > > > > Nico > > > > > > > > > > > > -- > > > > Nico De Ranter > > > > >-- Nico De Ranter Operations Engineer T. +32 16 40 12 82 M. +32 497 91 53 78 <http://www.esaturnus.com> <http://www.esaturnus.com> eSATURNUS Romeinse straat 12 3001 Leuven – Belgium T. +32 16 40 12 82 F. +32 16 40 84 77 www.esaturnus.com <http://www.esaturnus.com/company/news/313> <http://www.esaturnus.com/>