]> pere.pagekite.me Git - homepage.git/blob - blog/Autodetecting_Client_setup_for_roaming_workstations_in_Debian_Edu.html
ef93aa49c55bbb2996f8fb67fad3f092d872e16c
[homepage.git] / blog / Autodetecting_Client_setup_for_roaming_workstations_in_Debian_Edu.html
1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html>
4 <head>
5 <title>Petter Reinholdtsen: Autodetecting Client setup for roaming workstations in Debian Edu</title>
6 <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css">
7 </head>
8 <body>
9
10 <div class="title">
11 <h1>
12 <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
13
14 </h1>
15
16 </div>
17
18
19 <div class="entry">
20 <div class="title">Autodetecting Client setup for roaming workstations in Debian Edu</div>
21 <div class="date">2010-08-07 14:45</div>
22 <div class="body">
23 <p>A few days ago, I
24 <a href="http://people.skolelinux.org/pere/blog/Debian_Edu_roaming_workstation___at_the_university_of_Oslo.html">tried
25 to install</a> a Roaming workation profile from Debian Edu/Squeeze
26 while on the university network here at the University of Oslo, and
27 noticed how much had to change to get it operational using the
28 university infrastructure. It was fairly easy, but it occured to me
29 that Debian Edu would improve a lot if I could get the client to
30 connect without any changes at all, and thus let the client configure
31 itself during installation and first boot to use the infrastructure
32 around it. Now I am a huge step further along that road.</p>
33
34 <p>With our current squeeze-test packages, I can select the roaming
35 workstation profile and get a working laptop connecting to the
36 university LDAP server for user and group and our active directory
37 servers for Kerberos authentication. All this without any
38 configuration at all during installation. My users home directory got
39 a bookmark in the KDE menu to mount it via SMB, with the correct URL.
40 In short, openldap and sssd is correctly configured. In addition to
41 this, the client look for http://wpad/wpad.dat to configure a web
42 proxy, and when it fail to find it no proxy settings are stored in
43 /etc/environment and /etc/apt/apt.conf. Iceweasel and KDE is
44 configured to look for the same wpad configuration and also do not use
45 a proxy when at the university network. If the machine is moved to a
46 network with such wpad setup, it would automatically use it when DHCP
47 gave it a IP address.</p>
48
49 <p>The LDAP server is located using DNS, by first looking for the DNS
50 entry ldap.$domain. If this do not exist, it look for the
51 _ldap._tcp.$domain SRV records and use the first one as the LDAP
52 server. Next, it connects to the LDAP server and search all
53 namingContexts entries for posixAccount or posixGroup objects, and
54 pick the first one as the LDAP base. For Kerberos, a similar
55 algorithm is used to locate the LDAP server, and the realm is the
56 uppercase version of $domain.</p>
57
58 <p>So, what is not working, you might ask. SMB mounting my home
59 directory do not work. No idea why, but suspected the incorrect
60 Kerberos settings in /etc/krb5.conf and /etc/samba/smb.conf might be
61 the cause. These are not properly configured during installation, and
62 had to be hand-edited to get the correct Kerberos realm and server,
63 but SMB mounting still do not work. :(</p>
64
65 <p>With this automatic configuration in place, I expect a Debian Edu
66 roaming profile installation would be able to automatically detect and
67 connect to any site using LDAP and Kerberos for NSS directory and PAM
68 authentication. It should also work out of the box in a Active
69 Directory environment providing posixAccount and posixGroup objects
70 with UID and GID values.</p>
71
72 <p>If you want to help out with implementing these things for Debian
73 Edu, please contact us on debian-edu@lists.debian.org.</p>
74 </div>
75
76 <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.</div>
77
78 </div>
79
80
81
82
83
84
85 <div id="sidebar">
86
87 <h2>Archive</h2>
88 <ul>
89
90 <li>2010
91 <ul>
92
93 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
94
95 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
96
97 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
98
99 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
100
101 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
102
103 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
104
105 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
106
107 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
108
109 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (4)</a></li>
110
111 </ul></li>
112
113 <li>2009
114 <ul>
115
116 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
117
118 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
119
120 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
121
122 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
123
124 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
125
126 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
127
128 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
129
130 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
131
132 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
133
134 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
135
136 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
137
138 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
139
140 </ul></li>
141
142 <li>2008
143 <ul>
144
145 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
146
147 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
148
149 </ul></li>
150
151 </ul>
152
153
154
155 <h2>Tags</h2>
156 <ul>
157
158 <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (11)</a></li>
159
160 <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
161
162 <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
163
164 <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (10)</a></li>
165
166 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (36)</a></li>
167
168 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (44)</a></li>
169
170 <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (61)</a></li>
171
172 <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (1)</a></li>
173
174 <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (9)</a></li>
175
176 <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (4)</a></li>
177
178 <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (8)</a></li>
179
180 <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (2)</a></li>
181
182 <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
183
184 <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (7)</a></li>
185
186 <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (78)</a></li>
187
188 <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (103)</a></li>
189
190 <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (15)</a></li>
191
192 <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (17)</a></li>
193
194 <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (10)</a></li>
195
196 <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (3)</a></li>
197
198 <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
199
200 <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (14)</a></li>
201
202 <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (3)</a></li>
203
204 <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (14)</a></li>
205
206 <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (1)</a></li>
207
208 <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (12)</a></li>
209
210 <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (1)</a></li>
211
212 <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (9)</a></li>
213
214 </ul>
215
216 </div>
217 </body>
218 </html>