I'd like to have all users be able to log into any laptop in the house. They all have Debian 11 on them and I have joined them all to the domain. Now I want all users to authenticate through the dc so I can easily manage lockouts. I also want roaming profiles so when they log on, every laptop looks the same. Is this possible with a samba configuration? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In all things, Be Intentional.
On 11/12/22 22:51, Rob Campbell via samba wrote:> I'd like to have all users be able to log into any laptop in the house. > They all have Debian 11 on them and I have joined them all to the domain. > Now I want all users to authenticate through the dc so I can easily manage > lockouts. I also want roaming profiles so when they log on, every laptop > looks the same. Is this possible with a samba configuration? > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > In all things, Be Intentional.Yes, that is, but you are going to need to pair Samba with a couple of other Applications, like NextCloud. Roaming Profiles are for the most part, a Windows thing. Actual Linux Clients use NextCloud, eGroupware and other support applications with Samba at the center being a functional stand-in for OpenLDAP and Heimdal Kerberos.
On 13/11/2022 03:51, Rob Campbell via samba wrote:> I'd like to have all users be able to log into any laptop in the house. > They all have Debian 11 on them and I have joined them all to the domain. > Now I want all users to authenticate through the dc so I can easily manage > lockouts. I also want roaming profiles so when they log on, every laptop > looks the same. Is this possible with a samba configuration?Yes, this is possible, but you are going to have to use the 'ad' idmap backend and other programs to mount the profile, a 'root preexec' script or autofs etc. Rowland
Authentication is no problem, just join the PC to the domain and configure the login for your distribution, depending on your windowmanager.For the home-dir you can use pam_mount. All settings for a user is located in $HOME so if you mount $HOME from a Server the user always has his own $HOME on any PC. Am 13.11.22 um 04:51 schrieb Rob Campbell via samba:> I'd like to have all users be able to log into any laptop in the house. > They all have Debian 11 on them and I have joined them all to the domain. > Now I want all users to authenticate through the dc so I can easily manage > lockouts. I also want roaming profiles so when they log on, every laptop > looks the same. Is this possible with a samba configuration? > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > In all things, Be Intentional.-------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_signature Type: application/pgp-signature Size: 203 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20221113/3da6677d/OpenPGP_signature.sig>