<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
please contact us on debian-edu@lists.debian.org.</p>
</div>
- <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.</div>
+ <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.</div>
</div>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
--- /dev/null
+<?xml version="1.0" encoding="ISO-8859-1"?>
+<rss version='2.0' xmlns:lj='http://www.livejournal.org/rss/lj/1.0/'>
+ <channel>
+ <title>Petter Reinholdtsen - Entries from July 2010</title>
+ <description>Entries from July 2010</description>
+ <link>http://people.skolelinux.org/pere/blog/</link>
+
+
+ <item>
+ <title>Caching password, user and group on a roaming Debian laptop</title>
+ <link>http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html</link>
+ <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html</guid>
+ <pubDate>Thu, 1 Jul 2010 11:40:00 +0200</pubDate>
+ <description>
+<p>For a laptop, centralized user directories and password checking is
+a bit troubling. Laptops are typically used also when not connected
+to the network, and it is vital for a user to be able to log in or
+unlock the screen saver also when a central server is unavailable.
+This is possible by caching passwords and directory information (user
+and group attributes) locally, and the packages to do so are available
+in Debian. Here follow two recipes to set this up in Debian/Squeeze.
+It is also possible to set up in Debian/Lenny, but require more manual
+setup there because pam-auth-update is missing in Lenny.</p>
+
+<h2>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir</h2>
+
+This is the traditional method with a twist. The password caching is
+provided by libpam-ccreds (version 10-4 or later is needed on
+Squeeze), and the directory caching is done by nscd. The directory
+lookup and password checking is done using LDAP. If one want to use
+Kerberos for password checking the libpam-ldapd package can be
+replaced with libpam-krb5 or libpam-heimdal. If one is happy having a
+local home directory with the path listed in LDAP, one can use the
+pam_mkhomedir module from pam-modules to make this happen instead of
+using libpam-mklocaluser. A setup for pam-auth-update to enable
+pam_mkhomedir will have to be written until a fix for
+<a href="http://bugs.debian.org/568577">bug #568577</a> is in the
+archive. Because I believe it is a bad idea to have local home
+directories using misleading paths like /site/server/partition/, I
+prefer to create a local user with the home directory in /home/. This
+is done using the libpam-mklocaluser package.</p>
+
+<p>These packages need to be installed and configured</p>
+
+<blockquote><pre>
+libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
+</pre></blockquote>
+
+<p>The ldapd packages will ask for LDAP connection information, and
+one have to fill in the values that fits ones own site. Make sure the
+PAM part uses encrypted connections, to make sure the password is not
+sent in clear text to the LDAP server. I've been unable to get TLS
+certificate checking for a self signed certificate working, which make
+LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
+is talking to the correct LDAP server), and very much welcome feedback
+on how to get this working.</p>
+
+<p>Because nscd do not have a default configuration fit for offline
+caching until <a href="http://bugs.debian.org/485282">bug #485282</a>
+is fixed, this configuration should be used instead of the one
+currently in /etc/nscd.conf. The changes are in the fields
+reload-count and positive-time-to-live, and is based on the
+instructions I found in the
+<a href="http://www.flyn.org/laptopldap/">LDAP for Mobile Laptops</a>
+instructions by Flyn Computing.</p>
+
+<blockquote><pre>
+ debug-level 0
+ reload-count unlimited
+ paranoia no
+
+ enable-cache passwd yes
+ positive-time-to-live passwd 2592000
+ negative-time-to-live passwd 20
+ suggested-size passwd 211
+ check-files passwd yes
+ persistent passwd yes
+ shared passwd yes
+ max-db-size passwd 33554432
+ auto-propagate passwd yes
+
+ enable-cache group yes
+ positive-time-to-live group 2592000
+ negative-time-to-live group 20
+ suggested-size group 211
+ check-files group yes
+ persistent group yes
+ shared group yes
+ max-db-size group 33554432
+ auto-propagate group yes
+
+ enable-cache hosts no
+ positive-time-to-live hosts 2592000
+ negative-time-to-live hosts 20
+ suggested-size hosts 211
+ check-files hosts yes
+ persistent hosts yes
+ shared hosts yes
+ max-db-size hosts 33554432
+
+ enable-cache services yes
+ positive-time-to-live services 2592000
+ negative-time-to-live services 20
+ suggested-size services 211
+ check-files services yes
+ persistent services yes
+ shared services yes
+ max-db-size services 33554432
+</pre></blockquote>
+
+<p>While we wait for a mechanism to update /etc/nsswitch.conf
+automatically like the one provided in
+<a href="http://bugs.debian.org/496915">bug #496915</a>, the file
+content need to be manually replaced to ensure LDAP is used as the
+directory service on the machine. /etc/nsswitch.conf should normally
+look like this:</p>
+
+<blockquote><pre>
+passwd: files ldap
+group: files ldap
+shadow: files ldap
+hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4
+networks: files
+protocols: files
+services: files
+ethers: files
+rpc: files
+netgroup: files ldap
+</pre></blockquote>
+
+<p>The important parts are that ldap is listed last for passwd, group,
+shadow and netgroup.</p>
+
+<p>With these changes in place, any user in LDAP will be able to log
+in locally on the machine using for example kdm, get a local home
+directory created and have the password as well as user and group
+attributes cached.
+
+<h2>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
+ libpam-mklocaluser/pam_mkhomedir</h2>
+
+<p>Because nscd have had its share of problems, and seem to have
+problems doing proper caching, I've seen suggestions and recipes to
+use nss-updatedb to copy parts of the LDAP database locally when the
+LDAP database is available. I have not tested such setup, because I
+discovered sssd.</p>
+
+<h2>LDAP/Kerberos + sssd + libpam-mklocaluser</h2>
+
+<p>A more flexible and robust setup than the nscd combination
+mentioned earlier that has shown up recently, is the
+<a href="https://fedorahosted.org/sssd/">sssd</a> package from Redhat.
+It is part of the <a href="http://www.freeipa.org/">FreeIPA</A> project
+to provide a Active Directory like directory service for Linux
+machines. The sssd system combines the caching of passwords and user
+information into one package, and remove the need for nscd and
+libpam-ccreds. It support LDAP and Kerberos, but not NIS. Version
+1.2 do not support netgroups, but it is said that it will support this
+in version 1.5 expected to show up later in 2010. Because the
+<a href="http://packages.qa.debian.org/s/sssd.html">sssd package</a>
+was missing in Debian, I ended up co-maintaining it with Werner, and
+version 1.2 is now in testing.
+
+<p>These packages need to be installed and configured to get the
+roaming setup I want</p>
+
+<blockquote><pre>
+libpam-sss libnss-sss libpam-mklocaluser
+</pre></blockquote>
+
+The complete setup of sssd is done by editing/creating
+<tt>/etc/sssd/sssd.conf</tt>.
+
+<blockquote><pre>
+[sssd]
+config_file_version = 2
+reconnection_retries = 3
+sbus_timeout = 30
+services = nss, pam
+domains = INTERN
+
+[nss]
+filter_groups = root
+filter_users = root
+reconnection_retries = 3
+
+[pam]
+reconnection_retries = 3
+
+[domain/INTERN]
+enumerate = false
+cache_credentials = true
+
+id_provider = ldap
+auth_provider = ldap
+chpass_provider = ldap
+
+ldap_uri = ldap://ldap
+ldap_search_base = dc=skole,dc=skolelinux,dc=no
+ldap_tls_reqcert = never
+ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
+</pre></blockquote>
+
+<p>I got the same problem here with certificate checking. Had to set
+"ldap_tls_reqcert = never" to get it working.</p>
+
+<p>With the libnss-sss package in testing at the moment, the
+nsswitch.conf file is update automatically, so there is no need to
+modify it manually.</p>
+
+<p>If you want to help out with implementing this for Debian Edu,
+please contact us on debian-edu@lists.debian.org.</p>
+</description>
+ </item>
+
+ </channel>
+</rss>
--- /dev/null
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html>
+ <head>
+ <title>Petter Reinholdtsen: entries from July 2010</title>
+ <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css">
+ <link rel="alternate" title="RSS Feed" href="07.rss" type="application/rss+xml">
+ </head>
+ <body>
+<!-- XML FEED -->
+
+ <div class="title">
+ <h1>
+ <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
+
+ </h1>
+
+ </div>
+
+ <p>Entries from July 2010.</p>
+
+
+<div class="entry">
+ <div class="title">
+ <a href="http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html">Caching password, user and group on a roaming Debian laptop</a>
+ </div>
+ <div class="date">
+ 2010-07-01 11:40
+ </div>
+
+ <div class="body">
+
+<p>For a laptop, centralized user directories and password checking is
+a bit troubling. Laptops are typically used also when not connected
+to the network, and it is vital for a user to be able to log in or
+unlock the screen saver also when a central server is unavailable.
+This is possible by caching passwords and directory information (user
+and group attributes) locally, and the packages to do so are available
+in Debian. Here follow two recipes to set this up in Debian/Squeeze.
+It is also possible to set up in Debian/Lenny, but require more manual
+setup there because pam-auth-update is missing in Lenny.</p>
+
+<h2>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir</h2>
+
+This is the traditional method with a twist. The password caching is
+provided by libpam-ccreds (version 10-4 or later is needed on
+Squeeze), and the directory caching is done by nscd. The directory
+lookup and password checking is done using LDAP. If one want to use
+Kerberos for password checking the libpam-ldapd package can be
+replaced with libpam-krb5 or libpam-heimdal. If one is happy having a
+local home directory with the path listed in LDAP, one can use the
+pam_mkhomedir module from pam-modules to make this happen instead of
+using libpam-mklocaluser. A setup for pam-auth-update to enable
+pam_mkhomedir will have to be written until a fix for
+<a href="http://bugs.debian.org/568577">bug #568577</a> is in the
+archive. Because I believe it is a bad idea to have local home
+directories using misleading paths like /site/server/partition/, I
+prefer to create a local user with the home directory in /home/. This
+is done using the libpam-mklocaluser package.</p>
+
+<p>These packages need to be installed and configured</p>
+
+<blockquote><pre>
+libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
+</pre></blockquote>
+
+<p>The ldapd packages will ask for LDAP connection information, and
+one have to fill in the values that fits ones own site. Make sure the
+PAM part uses encrypted connections, to make sure the password is not
+sent in clear text to the LDAP server. I've been unable to get TLS
+certificate checking for a self signed certificate working, which make
+LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
+is talking to the correct LDAP server), and very much welcome feedback
+on how to get this working.</p>
+
+<p>Because nscd do not have a default configuration fit for offline
+caching until <a href="http://bugs.debian.org/485282">bug #485282</a>
+is fixed, this configuration should be used instead of the one
+currently in /etc/nscd.conf. The changes are in the fields
+reload-count and positive-time-to-live, and is based on the
+instructions I found in the
+<a href="http://www.flyn.org/laptopldap/">LDAP for Mobile Laptops</a>
+instructions by Flyn Computing.</p>
+
+<blockquote><pre>
+ debug-level 0
+ reload-count unlimited
+ paranoia no
+
+ enable-cache passwd yes
+ positive-time-to-live passwd 2592000
+ negative-time-to-live passwd 20
+ suggested-size passwd 211
+ check-files passwd yes
+ persistent passwd yes
+ shared passwd yes
+ max-db-size passwd 33554432
+ auto-propagate passwd yes
+
+ enable-cache group yes
+ positive-time-to-live group 2592000
+ negative-time-to-live group 20
+ suggested-size group 211
+ check-files group yes
+ persistent group yes
+ shared group yes
+ max-db-size group 33554432
+ auto-propagate group yes
+
+ enable-cache hosts no
+ positive-time-to-live hosts 2592000
+ negative-time-to-live hosts 20
+ suggested-size hosts 211
+ check-files hosts yes
+ persistent hosts yes
+ shared hosts yes
+ max-db-size hosts 33554432
+
+ enable-cache services yes
+ positive-time-to-live services 2592000
+ negative-time-to-live services 20
+ suggested-size services 211
+ check-files services yes
+ persistent services yes
+ shared services yes
+ max-db-size services 33554432
+</pre></blockquote>
+
+<p>While we wait for a mechanism to update /etc/nsswitch.conf
+automatically like the one provided in
+<a href="http://bugs.debian.org/496915">bug #496915</a>, the file
+content need to be manually replaced to ensure LDAP is used as the
+directory service on the machine. /etc/nsswitch.conf should normally
+look like this:</p>
+
+<blockquote><pre>
+passwd: files ldap
+group: files ldap
+shadow: files ldap
+hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4
+networks: files
+protocols: files
+services: files
+ethers: files
+rpc: files
+netgroup: files ldap
+</pre></blockquote>
+
+<p>The important parts are that ldap is listed last for passwd, group,
+shadow and netgroup.</p>
+
+<p>With these changes in place, any user in LDAP will be able to log
+in locally on the machine using for example kdm, get a local home
+directory created and have the password as well as user and group
+attributes cached.
+
+<h2>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
+ libpam-mklocaluser/pam_mkhomedir</h2>
+
+<p>Because nscd have had its share of problems, and seem to have
+problems doing proper caching, I've seen suggestions and recipes to
+use nss-updatedb to copy parts of the LDAP database locally when the
+LDAP database is available. I have not tested such setup, because I
+discovered sssd.</p>
+
+<h2>LDAP/Kerberos + sssd + libpam-mklocaluser</h2>
+
+<p>A more flexible and robust setup than the nscd combination
+mentioned earlier that has shown up recently, is the
+<a href="https://fedorahosted.org/sssd/">sssd</a> package from Redhat.
+It is part of the <a href="http://www.freeipa.org/">FreeIPA</A> project
+to provide a Active Directory like directory service for Linux
+machines. The sssd system combines the caching of passwords and user
+information into one package, and remove the need for nscd and
+libpam-ccreds. It support LDAP and Kerberos, but not NIS. Version
+1.2 do not support netgroups, but it is said that it will support this
+in version 1.5 expected to show up later in 2010. Because the
+<a href="http://packages.qa.debian.org/s/sssd.html">sssd package</a>
+was missing in Debian, I ended up co-maintaining it with Werner, and
+version 1.2 is now in testing.
+
+<p>These packages need to be installed and configured to get the
+roaming setup I want</p>
+
+<blockquote><pre>
+libpam-sss libnss-sss libpam-mklocaluser
+</pre></blockquote>
+
+The complete setup of sssd is done by editing/creating
+<tt>/etc/sssd/sssd.conf</tt>.
+
+<blockquote><pre>
+[sssd]
+config_file_version = 2
+reconnection_retries = 3
+sbus_timeout = 30
+services = nss, pam
+domains = INTERN
+
+[nss]
+filter_groups = root
+filter_users = root
+reconnection_retries = 3
+
+[pam]
+reconnection_retries = 3
+
+[domain/INTERN]
+enumerate = false
+cache_credentials = true
+
+id_provider = ldap
+auth_provider = ldap
+chpass_provider = ldap
+
+ldap_uri = ldap://ldap
+ldap_search_base = dc=skole,dc=skolelinux,dc=no
+ldap_tls_reqcert = never
+ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
+</pre></blockquote>
+
+<p>I got the same problem here with certificate checking. Had to set
+"ldap_tls_reqcert = never" to get it working.</p>
+
+<p>With the libnss-sss package in testing at the moment, the
+nsswitch.conf file is update automatically, so there is no need to
+modify it manually.</p>
+
+<p>If you want to help out with implementing this for Debian Edu,
+please contact us on debian-edu@lists.debian.org.</p>
+
+ </div>
+ <div class="tags">
+
+
+
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
+
+ </div>
+</div>
+ <div class="padding"></div>
+
+ <p style="text-align: right;"><a href="07.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS Feed" width="36" height="14"></a></p>
+
+
+
+<div id="sidebar">
+
+<h2>Archive</h2>
+<ul>
+
+<li>2010
+<ul>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (1)</a></li>
+
+</ul></li>
+
+<li>2009
+<ul>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
+
+</ul></li>
+
+<li>2008
+<ul>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
+
+</ul></li>
+
+</ul>
+
+
+
+<h2>Tags</h2>
+<ul>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (11)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (10)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (29)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (29)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (42)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (1)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (7)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (5)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (69)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (80)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (13)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (13)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (10)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (9)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (3)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (13)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (1)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (10)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (1)</a></li>
+
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (6)</a></li>
+
+</ul>
+
+</div>
+</body>
+</html>
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
</div>
</div>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
</div>
</div>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
</div>
</div>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
</div>
</div>
+<div class="padding"></div>
+
+<div class="entry">
+ <div class="title">
+ <a href="http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html">Caching password, user and group on a roaming Debian laptop</a>
+ </div>
+ <div class="date">
+ 2010-07-01 11:40
+ </div>
+
+ <div class="body">
+
+<p>For a laptop, centralized user directories and password checking is
+a bit troubling. Laptops are typically used also when not connected
+to the network, and it is vital for a user to be able to log in or
+unlock the screen saver also when a central server is unavailable.
+This is possible by caching passwords and directory information (user
+and group attributes) locally, and the packages to do so are available
+in Debian. Here follow two recipes to set this up in Debian/Squeeze.
+It is also possible to set up in Debian/Lenny, but require more manual
+setup there because pam-auth-update is missing in Lenny.</p>
+
+<h2>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir</h2>
+
+This is the traditional method with a twist. The password caching is
+provided by libpam-ccreds (version 10-4 or later is needed on
+Squeeze), and the directory caching is done by nscd. The directory
+lookup and password checking is done using LDAP. If one want to use
+Kerberos for password checking the libpam-ldapd package can be
+replaced with libpam-krb5 or libpam-heimdal. If one is happy having a
+local home directory with the path listed in LDAP, one can use the
+pam_mkhomedir module from pam-modules to make this happen instead of
+using libpam-mklocaluser. A setup for pam-auth-update to enable
+pam_mkhomedir will have to be written until a fix for
+<a href="http://bugs.debian.org/568577">bug #568577</a> is in the
+archive. Because I believe it is a bad idea to have local home
+directories using misleading paths like /site/server/partition/, I
+prefer to create a local user with the home directory in /home/. This
+is done using the libpam-mklocaluser package.</p>
+
+<p>These packages need to be installed and configured</p>
+
+<blockquote><pre>
+libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
+</pre></blockquote>
+
+<p>The ldapd packages will ask for LDAP connection information, and
+one have to fill in the values that fits ones own site. Make sure the
+PAM part uses encrypted connections, to make sure the password is not
+sent in clear text to the LDAP server. I've been unable to get TLS
+certificate checking for a self signed certificate working, which make
+LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
+is talking to the correct LDAP server), and very much welcome feedback
+on how to get this working.</p>
+
+<p>Because nscd do not have a default configuration fit for offline
+caching until <a href="http://bugs.debian.org/485282">bug #485282</a>
+is fixed, this configuration should be used instead of the one
+currently in /etc/nscd.conf. The changes are in the fields
+reload-count and positive-time-to-live, and is based on the
+instructions I found in the
+<a href="http://www.flyn.org/laptopldap/">LDAP for Mobile Laptops</a>
+instructions by Flyn Computing.</p>
+
+<blockquote><pre>
+ debug-level 0
+ reload-count unlimited
+ paranoia no
+
+ enable-cache passwd yes
+ positive-time-to-live passwd 2592000
+ negative-time-to-live passwd 20
+ suggested-size passwd 211
+ check-files passwd yes
+ persistent passwd yes
+ shared passwd yes
+ max-db-size passwd 33554432
+ auto-propagate passwd yes
+
+ enable-cache group yes
+ positive-time-to-live group 2592000
+ negative-time-to-live group 20
+ suggested-size group 211
+ check-files group yes
+ persistent group yes
+ shared group yes
+ max-db-size group 33554432
+ auto-propagate group yes
+
+ enable-cache hosts no
+ positive-time-to-live hosts 2592000
+ negative-time-to-live hosts 20
+ suggested-size hosts 211
+ check-files hosts yes
+ persistent hosts yes
+ shared hosts yes
+ max-db-size hosts 33554432
+
+ enable-cache services yes
+ positive-time-to-live services 2592000
+ negative-time-to-live services 20
+ suggested-size services 211
+ check-files services yes
+ persistent services yes
+ shared services yes
+ max-db-size services 33554432
+</pre></blockquote>
+
+<p>While we wait for a mechanism to update /etc/nsswitch.conf
+automatically like the one provided in
+<a href="http://bugs.debian.org/496915">bug #496915</a>, the file
+content need to be manually replaced to ensure LDAP is used as the
+directory service on the machine. /etc/nsswitch.conf should normally
+look like this:</p>
+
+<blockquote><pre>
+passwd: files ldap
+group: files ldap
+shadow: files ldap
+hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4
+networks: files
+protocols: files
+services: files
+ethers: files
+rpc: files
+netgroup: files ldap
+</pre></blockquote>
+
+<p>The important parts are that ldap is listed last for passwd, group,
+shadow and netgroup.</p>
+
+<p>With these changes in place, any user in LDAP will be able to log
+in locally on the machine using for example kdm, get a local home
+directory created and have the password as well as user and group
+attributes cached.
+
+<h2>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
+ libpam-mklocaluser/pam_mkhomedir</h2>
+
+<p>Because nscd have had its share of problems, and seem to have
+problems doing proper caching, I've seen suggestions and recipes to
+use nss-updatedb to copy parts of the LDAP database locally when the
+LDAP database is available. I have not tested such setup, because I
+discovered sssd.</p>
+
+<h2>LDAP/Kerberos + sssd + libpam-mklocaluser</h2>
+
+<p>A more flexible and robust setup than the nscd combination
+mentioned earlier that has shown up recently, is the
+<a href="https://fedorahosted.org/sssd/">sssd</a> package from Redhat.
+It is part of the <a href="http://www.freeipa.org/">FreeIPA</A> project
+to provide a Active Directory like directory service for Linux
+machines. The sssd system combines the caching of passwords and user
+information into one package, and remove the need for nscd and
+libpam-ccreds. It support LDAP and Kerberos, but not NIS. Version
+1.2 do not support netgroups, but it is said that it will support this
+in version 1.5 expected to show up later in 2010. Because the
+<a href="http://packages.qa.debian.org/s/sssd.html">sssd package</a>
+was missing in Debian, I ended up co-maintaining it with Werner, and
+version 1.2 is now in testing.
+
+<p>These packages need to be installed and configured to get the
+roaming setup I want</p>
+
+<blockquote><pre>
+libpam-sss libnss-sss libpam-mklocaluser
+</pre></blockquote>
+
+The complete setup of sssd is done by editing/creating
+<tt>/etc/sssd/sssd.conf</tt>.
+
+<blockquote><pre>
+[sssd]
+config_file_version = 2
+reconnection_retries = 3
+sbus_timeout = 30
+services = nss, pam
+domains = INTERN
+
+[nss]
+filter_groups = root
+filter_users = root
+reconnection_retries = 3
+
+[pam]
+reconnection_retries = 3
+
+[domain/INTERN]
+enumerate = false
+cache_credentials = true
+
+id_provider = ldap
+auth_provider = ldap
+chpass_provider = ldap
+
+ldap_uri = ldap://ldap
+ldap_search_base = dc=skole,dc=skolelinux,dc=no
+ldap_tls_reqcert = never
+ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
+</pre></blockquote>
+
+<p>I got the same problem here with certificate checking. Had to set
+"ldap_tls_reqcert = never" to get it working.</p>
+
+<p>With the libnss-sss package in testing at the moment, the
+nsswitch.conf file is update automatically, so there is no need to
+modify it manually.</p>
+
+<p>If you want to help out with implementing this for Debian Edu,
+please contact us on debian-edu@lists.debian.org.</p>
+
+ </div>
+ <div class="tags">
+
+
+
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
+
+ </div>
+</div>
<div class="padding"></div>
<p style="text-align: right;"><a href="ldap.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS Feed" width="36" height="14"></a></p>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
</description>
</item>
+ <item>
+ <title>Caching password, user and group on a roaming Debian laptop</title>
+ <link>http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html</link>
+ <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html</guid>
+ <pubDate>Thu, 1 Jul 2010 11:40:00 +0200</pubDate>
+ <description>
+<p>For a laptop, centralized user directories and password checking is
+a bit troubling. Laptops are typically used also when not connected
+to the network, and it is vital for a user to be able to log in or
+unlock the screen saver also when a central server is unavailable.
+This is possible by caching passwords and directory information (user
+and group attributes) locally, and the packages to do so are available
+in Debian. Here follow two recipes to set this up in Debian/Squeeze.
+It is also possible to set up in Debian/Lenny, but require more manual
+setup there because pam-auth-update is missing in Lenny.</p>
+
+<h2>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir</h2>
+
+This is the traditional method with a twist. The password caching is
+provided by libpam-ccreds (version 10-4 or later is needed on
+Squeeze), and the directory caching is done by nscd. The directory
+lookup and password checking is done using LDAP. If one want to use
+Kerberos for password checking the libpam-ldapd package can be
+replaced with libpam-krb5 or libpam-heimdal. If one is happy having a
+local home directory with the path listed in LDAP, one can use the
+pam_mkhomedir module from pam-modules to make this happen instead of
+using libpam-mklocaluser. A setup for pam-auth-update to enable
+pam_mkhomedir will have to be written until a fix for
+<a href="http://bugs.debian.org/568577">bug #568577</a> is in the
+archive. Because I believe it is a bad idea to have local home
+directories using misleading paths like /site/server/partition/, I
+prefer to create a local user with the home directory in /home/. This
+is done using the libpam-mklocaluser package.</p>
+
+<p>These packages need to be installed and configured</p>
+
+<blockquote><pre>
+libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
+</pre></blockquote>
+
+<p>The ldapd packages will ask for LDAP connection information, and
+one have to fill in the values that fits ones own site. Make sure the
+PAM part uses encrypted connections, to make sure the password is not
+sent in clear text to the LDAP server. I've been unable to get TLS
+certificate checking for a self signed certificate working, which make
+LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
+is talking to the correct LDAP server), and very much welcome feedback
+on how to get this working.</p>
+
+<p>Because nscd do not have a default configuration fit for offline
+caching until <a href="http://bugs.debian.org/485282">bug #485282</a>
+is fixed, this configuration should be used instead of the one
+currently in /etc/nscd.conf. The changes are in the fields
+reload-count and positive-time-to-live, and is based on the
+instructions I found in the
+<a href="http://www.flyn.org/laptopldap/">LDAP for Mobile Laptops</a>
+instructions by Flyn Computing.</p>
+
+<blockquote><pre>
+ debug-level 0
+ reload-count unlimited
+ paranoia no
+
+ enable-cache passwd yes
+ positive-time-to-live passwd 2592000
+ negative-time-to-live passwd 20
+ suggested-size passwd 211
+ check-files passwd yes
+ persistent passwd yes
+ shared passwd yes
+ max-db-size passwd 33554432
+ auto-propagate passwd yes
+
+ enable-cache group yes
+ positive-time-to-live group 2592000
+ negative-time-to-live group 20
+ suggested-size group 211
+ check-files group yes
+ persistent group yes
+ shared group yes
+ max-db-size group 33554432
+ auto-propagate group yes
+
+ enable-cache hosts no
+ positive-time-to-live hosts 2592000
+ negative-time-to-live hosts 20
+ suggested-size hosts 211
+ check-files hosts yes
+ persistent hosts yes
+ shared hosts yes
+ max-db-size hosts 33554432
+
+ enable-cache services yes
+ positive-time-to-live services 2592000
+ negative-time-to-live services 20
+ suggested-size services 211
+ check-files services yes
+ persistent services yes
+ shared services yes
+ max-db-size services 33554432
+</pre></blockquote>
+
+<p>While we wait for a mechanism to update /etc/nsswitch.conf
+automatically like the one provided in
+<a href="http://bugs.debian.org/496915">bug #496915</a>, the file
+content need to be manually replaced to ensure LDAP is used as the
+directory service on the machine. /etc/nsswitch.conf should normally
+look like this:</p>
+
+<blockquote><pre>
+passwd: files ldap
+group: files ldap
+shadow: files ldap
+hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4
+networks: files
+protocols: files
+services: files
+ethers: files
+rpc: files
+netgroup: files ldap
+</pre></blockquote>
+
+<p>The important parts are that ldap is listed last for passwd, group,
+shadow and netgroup.</p>
+
+<p>With these changes in place, any user in LDAP will be able to log
+in locally on the machine using for example kdm, get a local home
+directory created and have the password as well as user and group
+attributes cached.
+
+<h2>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
+ libpam-mklocaluser/pam_mkhomedir</h2>
+
+<p>Because nscd have had its share of problems, and seem to have
+problems doing proper caching, I've seen suggestions and recipes to
+use nss-updatedb to copy parts of the LDAP database locally when the
+LDAP database is available. I have not tested such setup, because I
+discovered sssd.</p>
+
+<h2>LDAP/Kerberos + sssd + libpam-mklocaluser</h2>
+
+<p>A more flexible and robust setup than the nscd combination
+mentioned earlier that has shown up recently, is the
+<a href="https://fedorahosted.org/sssd/">sssd</a> package from Redhat.
+It is part of the <a href="http://www.freeipa.org/">FreeIPA</A> project
+to provide a Active Directory like directory service for Linux
+machines. The sssd system combines the caching of passwords and user
+information into one package, and remove the need for nscd and
+libpam-ccreds. It support LDAP and Kerberos, but not NIS. Version
+1.2 do not support netgroups, but it is said that it will support this
+in version 1.5 expected to show up later in 2010. Because the
+<a href="http://packages.qa.debian.org/s/sssd.html">sssd package</a>
+was missing in Debian, I ended up co-maintaining it with Werner, and
+version 1.2 is now in testing.
+
+<p>These packages need to be installed and configured to get the
+roaming setup I want</p>
+
+<blockquote><pre>
+libpam-sss libnss-sss libpam-mklocaluser
+</pre></blockquote>
+
+The complete setup of sssd is done by editing/creating
+<tt>/etc/sssd/sssd.conf</tt>.
+
+<blockquote><pre>
+[sssd]
+config_file_version = 2
+reconnection_retries = 3
+sbus_timeout = 30
+services = nss, pam
+domains = INTERN
+
+[nss]
+filter_groups = root
+filter_users = root
+reconnection_retries = 3
+
+[pam]
+reconnection_retries = 3
+
+[domain/INTERN]
+enumerate = false
+cache_credentials = true
+
+id_provider = ldap
+auth_provider = ldap
+chpass_provider = ldap
+
+ldap_uri = ldap://ldap
+ldap_search_base = dc=skole,dc=skolelinux,dc=no
+ldap_tls_reqcert = never
+ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
+</pre></blockquote>
+
+<p>I got the same problem here with certificate checking. Had to set
+"ldap_tls_reqcert = never" to get it working.</p>
+
+<p>With the libnss-sss package in testing at the moment, the
+nsswitch.conf file is update automatically, so there is no need to
+modify it manually.</p>
+
+<p>If you want to help out with implementing this for Debian Edu,
+please contact us on debian-edu@lists.debian.org.</p>
+</description>
+ </item>
+
</channel>
</rss>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
</div>
</div>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>