blog/Debian_Edu_roaming_workstation___at_the_university_of_Oslo.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2         "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html>
   4  <head>
   5   <title>Petter Reinholdtsen: Debian Edu roaming workstation - at the university of Oslo</title>
   6   <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css">
   7  </head>
   8  <body>
   9
  10  <div class="title">
  11   <h1>
  12        <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  13
  14   </h1>
  15
  16  </div>
  17
  18
  19  <div class="entry">
  20   <div class="title">Debian Edu roaming workstation - at the university of Oslo</div>
  21   <div class="date">2010-08-03 23:30</div>
  22   <div class="body">
  23 <p>The new roaming workstation profile in Debian Edu/Squeeze is fairly
  24 similar to the laptop setup am I working on using Ubuntu for the
  25 University of Oslo, and just for the heck of it, I tested today how
  26 hard it would be to integrate that profile into the university
  27 infrastructure.  In this case, it is the university LDAP server,
  28 Active Directory Kerberos server and SMB mounting from the Netapp file
  29 servers.</p>
  30
  31 <p>I was pleasantly surprised that the only three files needed to be
  32 changed (/etc/sssd/sssd.conf, /etc/ldap.conf and
  33 /etc/mklocaluser.d/20-debian-edu-config) and one file had to be added
  34 (/usr/share/perl5/Debian/Edu_Local.pm), to get the client working.
  35 Most of the changes were to get the client to use the university LDAP
  36 for NSS and Kerberos server for PAM, but one was to change a hard
  37 coded DNS domain name in the mklocaluser hook from .intern to
  38 .uio.no.</p>
  39
  40 <p>This testing was so encouraging, that I went ahead and adjusted the
  41 Debian Edu scripts and setup in subversion to centralise the roaming
  42 workstation setup a bit more and avoid the hardcoded DNS domain name,
  43 so that when I test this tomorrow, I expect to get away with modifying
  44 only /etc/sssd/sssd.conf and /etc/ldap.conf to get it to use the
  45 university servers.</p>
  46
  47 <p>My goal is to get the clients to have no hardcoded settings and
  48 fetch all their initial setup during installation and first boot, to
  49 allow them to be inserted also into environments where the default
  50 setup in Debian Edu has been changed or as with the university, where
  51 the environment is different but provides the protocols Debian Edu
  52 uses.</p>
  53 </div>
  54
  55   <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.</div>
  56
  57   </div>
  58
  59
  60
  61
  62
  63
  64 <div id="sidebar">
  65
  66 <h2>Archive</h2>
  67 <ul>
  68
  69 <li>2011
  70 <ul>
  71
  72 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
  73
  74 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (2)</a></li>
  75
  76 </ul></li>
  77
  78 <li>2010
  79 <ul>
  80
  81 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
  82
  83 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
  84
  85 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
  86
  87 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
  88
  89 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
  90
  91 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
  92
  93 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
  94
  95 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
  96
  97 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
  98
  99 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
 100
 101 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
 102
 103 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
 104
 105 </ul></li>
 106
 107 <li>2009
 108 <ul>
 109
 110 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
 111
 112 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
 113
 114 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
 115
 116 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
 117
 118 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
 119
 120 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
 121
 122 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
 123
 124 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
 125
 126 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
 127
 128 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
 129
 130 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
 131
 132 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
 133
 134 </ul></li>
 135
 136 <li>2008
 137 <ul>
 138
 139 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
 140
 141 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
 142
 143 </ul></li>
 144
 145 </ul>
 146
 147
 148
 149 <h2>Tags</h2>
 150 <ul>
 151
 152  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
 153
 154  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
 155
 156  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
 157
 158  <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (2)</a></li>
 159
 160  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (10)</a></li>
 161
 162  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (48)</a></li>
 163
 164  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (59)</a></li>
 165
 166  <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (7)</a></li>
 167
 168  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (86)</a></li>
 169
 170  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (2)</a></li>
 171
 172  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (11)</a></li>
 173
 174  <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (5)</a></li>
 175
 176  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (7)</a></li>
 177
 178  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (8)</a></li>
 179
 180  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (4)</a></li>
 181
 182  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
 183
 184  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (11)</a></li>
 185
 186  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (108)</a></li>
 187
 188  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (116)</a></li>
 189
 190  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (19)</a></li>
 191
 192  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (35)</a></li>
 193
 194  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
 195
 196  <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (2)</a></li>
 197
 198  <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (4)</a></li>
 199
 200  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
 201
 202  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (23)</a></li>
 203
 204  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (3)</a></li>
 205
 206  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (24)</a></li>
 207
 208  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (1)</a></li>
 209
 210  <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (7)</a></li>
 211
 212  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (19)</a></li>
 213
 214  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (1)</a></li>
 215
 216  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (14)</a></li>
 217
 218 </ul>
 219
 220 </div>
 221  </body>
 222 </html>