Line 6: |
Line 6: |
| | | |
| ==Client configuration== | | ==Client configuration== |
− | SME Server's has been and remains focused on serving windows clients, however Linux clients also work well with SME.
| + | {{Level|advanced}} |
| | | |
− | These instructions work for Mepis 6.5 and 7.0 | + | SME Server's has been and remains focused on serving windows clients, however Linux clients also work well with SME Server. |
| + | |
| + | These instructions are current for Mepis 7.0 and SME Server 7.3 |
| + | |
| + | Client configuration was originally based on http://tech.canterburyschool.org/tech/UbuntuWorkstations. |
| | | |
| ===Domain Login=== | | ===Domain Login=== |
| A Domain login lets users login without admin setting up each user first. | | A Domain login lets users login without admin setting up each user first. |
| | | |
− | You can use these command line instructions or use your GUI tools.<br>
| + | ====Client configuration==== |
− | Comment out the existing setting and paste the new
| |
− | | |
| apt-get install winbind libpam-mount | | apt-get install winbind libpam-mount |
| | | |
Line 21: |
Line 23: |
| | | |
| workgroup = 'Your Windows workgroup' # probably correct, you set this during install | | workgroup = 'Your Windows workgroup' # probably correct, you set this during install |
− | security = domain # may be set to user | + | security = domain # edit, set to user |
− | idmap uid = 10000-20000 | + | wins server 192.168.1.1 # edit, to your server IP |
− | idmap gid = 10000-20000 | + | ;password server = * # remove line |
| + | winbind uid = 10000-20000 |
| + | winbind gid = 10000-20000 |
| template shell = /bin/bash | | template shell = /bin/bash |
| template homedir = /home/%U | | template homedir = /home/%U |
Line 29: |
Line 33: |
| winbind enum groups = yes | | winbind enum groups = yes |
| winbind cache time = 10 | | winbind cache time = 10 |
− | winbind separator = + | + | winbind separator = / |
− | password server = *
| |
| winbind use default domain = yes | | winbind use default domain = yes |
| + | acl compatibility = winnt |
| | | |
| nano -w /etc/nsswitch.conf | | nano -w /etc/nsswitch.conf |
Line 38: |
Line 42: |
| group: compat winbind | | group: compat winbind |
| shadow: compat winbind | | shadow: compat winbind |
| + | hosts: files wins dns |
| | | |
| nano -w /etc/pam.d/common-account | | nano -w /etc/pam.d/common-account |
Line 47: |
Line 52: |
| | | |
| auth required pam_mount.so | | auth required pam_mount.so |
− | # | + | |
− | ## use the follolwing "auth" line by itself to restrict local access (a bit paranoid) -
| |
| ## will validate ONLY off of network | | ## will validate ONLY off of network |
| #auth required pam_winbind.so use_first_pass | | #auth required pam_winbind.so use_first_pass |
− | # | + | |
− | ## use the TWO "auth" lines below for either network or local validation -
| |
| ## will validate off of EITHER network or local passwd db | | ## will validate off of EITHER network or local passwd db |
| auth sufficient pam_winbind.so use_first_pass | | auth sufficient pam_winbind.so use_first_pass |
Line 63: |
Line 66: |
| session optional pam_mount.so | | session optional pam_mount.so |
| | | |
− | This is where SME doesn't support linux clients as well as windows, so... logon to your SME Server
| + | optional, do later if needed, add to |
− | | + | nano -w /etc/hosts |
− | To check your client values > K menu > Setting Configuration > Internet and Networking > Samba <br>
| + | 192.168.1.1 YourServername |
− | '''ClientName''' is the NetBIOS Name, NOTE: you must add the trailing $ <br>
| |
− | '''Workgroup''' should be your SME Server Workgroup <br>
| |
| | | |
− | signal-event machine-account-create ClientName$ | + | /etc/init.d/samba restart |
− | smbpasswd -a -m ClientName$ | + | /etc/init.d/winbind restart |
− | | |
− | Now back to mepis and join the workgroup/domain
| |
− | net rpc join -D WorkGroup -U admin
| |
− | | |
− | Ideas borrowed from http://tech.canterburyschool.org/tech/UbuntuWorkstations , Thanks !
| |
| | | |
| If you misconfigure a file and lock yourself out of the workstation <br> | | If you misconfigure a file and lock yourself out of the workstation <br> |
Line 82: |
Line 78: |
| login as root and check your config files | | login as root and check your config files |
| | | |
− | ===Mounting Shares=== | + | ====Connect to domain==== |
− | You have two options, pam_mount will work if you use domain logins, smb4k will work with or without
| + | on SME 7.3 and above |
| | | |
− | ====pam_mount.conf====
| + | On the client [''Workgroup'' is your SME Server Workgroup] |
− | mount you server home directory (&) and ibays
| + | and admin may be any user in the 'domain-admin' group |
| + | net rpc join -D '''WorkGroup''' -U admin |
| | | |
− | nano -w /etc/security/pam_mount.conf
| + | Log out, and now you should have all your SME Users in your login 'user list' |
| | | |
− | volume * smbfs servername & /home/&/Desktop/& uid=&,gid=10000,dmask=0700 - -
| + | ====Mounting Shares==== |
− | volume * smbfs servername ibay1 /home/&/Desktop/ibay1 uid=&,gid=10000,dmask=0700 - -
| + | pam_mount works well if you use domain logins, other methods are too much trouble. |
| | | |
− | ====smb4k====
| + | mount your server home directory and ibays |
− | Mount any Samba share in you local network with smb4k
| |
| | | |
− | K menu > Internet > Connection > Smb4k File Browser
| + | nano -w /etc/security/pam_mount.conf |
− | | + | |
− | Create a password for your Kwallet
| + | volume * smbfs servername & /home/&/Desktop/& uid=&,gid=10000,dmask=0700 - - |
− | | + | volume * smbfs servername ibay1 /home/&/Desktop/ibay1 uid=&,gid=10000,dmask=0700 - - |
− | Settings > Configure, and configure to suit
| |
− | | |
− | Click on your Server and the share you wish to mount
| |
− | | |
− | To have smb4k run on startup
| |
− | | |
− | Right click, send to desktop, K menu > Internet > Connection > Smb4k File Browser
| |
− | | |
− | Open your documents folder, menu > view > show hidden files
| |
− | | |
− | Drag the shortcut to the folder /home/stephen/.kde/Autostart, create if neccesary
| |
| | | |
| ===Printing=== | | ===Printing=== |
| Printing to your SME Server depends on your printers being supported by cups | | Printing to your SME Server depends on your printers being supported by cups |
| | | |
− | ====cupsd====
| + | '''cupsd''' |
| + | |
| When you install mepis, when asked you should elect to run cupsd | | When you install mepis, when asked you should elect to run cupsd |
| | | |
− | check with | + | check and if necessary change with |
| ls -la /etc/rc5.d/???cupsys | | ls -la /etc/rc5.d/???cupsys |
− | if necessary
| |
| cd /etc/rc5.d | | cd /etc/rc5.d |
− | mv K19cupsys S19cupsys | + | mv K??cupsys S20cupsys |
| + | |
| + | '''Configure printer''' |
| | | |
− | ====Configure printer====
| |
| K menu > Settings > Peripherals > Printers | | K menu > Settings > Peripherals > Printers |
| | | |
Line 140: |
Line 126: |
| | | |
| ===Ident=== | | ===Ident=== |
− | If using Ident Authentication for browsing install 'ident2' | + | If using Ident Authentication for browsing |
| + | apt-get install ident2 |
| + | |
| + | |
| + | ===PPTP Connection=== |
| + | When you install mepis, when asked you should elect to run ppp |
| + | |
| + | To Connect to a remote SME Server |
| + | apt-get install pptp-linux kvpnc |
| + | |
| + | K menu > Internet > Connection > VPN Client |
| + | |
| + | ===Applications=== |
| + | *Install VMware, http://www.mepis.org/docs/en/index.php/VMWare#MEPIS_7.0 |
| + | |
| + | *Install a subversion client, synaptic -> kdesvn |
| + | |
| + | *Enable mp3 & multimedia |
| + | :Synaptic > settings > repositories. Activate the repository for Debian-Multimedia |
| + | :Then install Libdvdcss2 and w32codecs |
| + | |
| + | ===Settings=== |
| + | *Thunderbird, to enable links in email |
| + | :Advance,General,Config Editor, Right Click, New > String |
| + | : preference=network.protocol-handler.app.http, string=firefox |
| + | : preference=network.protocol-handler.app.https, string=firefox |
| | | |
| + | *Enable Numlocks |
| + | :http://www.mepis.org/node/6937 |
| | | |
| + | ---- |
| [[Category:Howto]] | | [[Category:Howto]] |
| + | [[Category:Administration]] |