689
edits
Changes
From SME Server
Jump to navigationJump to search
mLine 6:
Line 6: − SME Server's has been and remains focused on serving windows clients, however Linux clients also work well with SME. + − + + + + + − You can use these command line instructions or use your GUI tools.<br> + − Comment out the existing setting and paste the new − Line 21:
Line 23: − + − idmap uid = 10000-20000 + − idmap gid = 10000-20000 + + + Line 29:
Line 33: − + − password server = * + Line 38:
Line 42: + Line 47:
Line 52: − # + − ## use the follolwing "auth" line by itself to restrict local access (a bit paranoid) - − # + − ## use the TWO "auth" lines below for either network or local validation - Line 63:
Line 66: − This is where SME doesn't support linux clients as well as windows, so... logon to your SME Server+ − + − To check your client values > K menu > Setting Configuration > Internet and Networking > Samba <br>+ − '''ClientName''' is the NetBIOS Name, NOTE: you must add the trailing $ <br> − '''Workgroup''' should be your SME Server Workgroup <br> − − signal-event machine-account-create ClientName$ − smbpasswd -a -m ClientName$ − Now back to mepis and join the workgroup/domain+ − net rpc join -D WorkGroup -U admin+ − − Ideas borrowed from http://tech.canterburyschool.org/tech/UbuntuWorkstations , Thanks ! Line 82:
Line 78: − + − You have two options, pam_mount will work if you use domain logins, smb4k will work with or without+ − ====pam_mount.conf====+ − edit /etc/security/pam_mount.conf <br>+ − as per step 5. in the canturbury ubuntu howto <br>+ − the permissions need work, please update here with better values − ====smb4k====+ − Mount any Samba share in you local network with smb4k − K menu > Internet > Connection > Smb4k File Browser+ + − Create a password for your Kwallet+ − Settings > Configure, and configure to suit+ − + − Click on your Server and the share you wish to mount+ − + − To have smb4k run on startup − − Right click, send to desktop, K menu > Internet > Connection > Smb4k File Browser − − Open your documents folder, menu > view > show hidden files − − Drag the shortcut to the folder /home/stephen/.kde/Autostart, create if neccesary − ====cupsd====+ + − + − if necessary − + + + − ====Configure printer==== Line 137:
Line 126: − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
categorisation
==Client configuration==
==Client configuration==
{{Level|advanced}}
These instructions work for Mepis 6.5 and 7.0
SME Server's has been and remains focused on serving windows clients, however Linux clients also work well with SME Server.
These instructions are current for Mepis 7.0 and SME Server 7.3
Client configuration was originally based on http://tech.canterburyschool.org/tech/UbuntuWorkstations.
===Domain Login===
===Domain Login===
A Domain login lets users login without admin setting up each user first.
A Domain login lets users login without admin setting up each user first.
====Client configuration====
apt-get install winbind libpam-mount
apt-get install winbind libpam-mount
workgroup = 'Your Windows workgroup' # probably correct, you set this during install
workgroup = 'Your Windows workgroup' # probably correct, you set this during install
security = domain # may be set to user
security = domain # edit, set to user
wins server 192.168.1.1 # edit, to your server IP
;password server = * # remove line
winbind uid = 10000-20000
winbind gid = 10000-20000
template shell = /bin/bash
template shell = /bin/bash
template homedir = /home/%U
template homedir = /home/%U
winbind enum groups = yes
winbind enum groups = yes
winbind cache time = 10
winbind cache time = 10
winbind separator = +
winbind separator = /
winbind use default domain = yes
winbind use default domain = yes
acl compatibility = winnt
nano -w /etc/nsswitch.conf
nano -w /etc/nsswitch.conf
group: compat winbind
group: compat winbind
shadow: compat winbind
shadow: compat winbind
hosts: files wins dns
nano -w /etc/pam.d/common-account
nano -w /etc/pam.d/common-account
auth required pam_mount.so
auth required pam_mount.so
## will validate ONLY off of network
## will validate ONLY off of network
#auth required pam_winbind.so use_first_pass
#auth required pam_winbind.so use_first_pass
## will validate off of EITHER network or local passwd db
## will validate off of EITHER network or local passwd db
auth sufficient pam_winbind.so use_first_pass
auth sufficient pam_winbind.so use_first_pass
session optional pam_mount.so
session optional pam_mount.so
optional, do later if needed, add to
nano -w /etc/hosts
192.168.1.1 YourServername
/etc/init.d/samba restart
/etc/init.d/winbind restart
If you misconfigure a file and lock yourself out of the workstation <br>
If you misconfigure a file and lock yourself out of the workstation <br>
login as root and check your config files
login as root and check your config files
===Mounting Shares===
====Connect to domain====
on SME 7.3 and above
On the client [''Workgroup'' is your SME Server Workgroup]
and admin may be any user in the 'domain-admin' group
net rpc join -D '''WorkGroup''' -U admin
Log out, and now you should have all your SME Users in your login 'user list'
====Mounting Shares====
pam_mount works well if you use domain logins, other methods are too much trouble.
mount your server home directory and ibays
nano -w /etc/security/pam_mount.conf
volume * smbfs servername & /home/&/Desktop/& uid=&,gid=10000,dmask=0700 - -
volume * smbfs servername ibay1 /home/&/Desktop/ibay1 uid=&,gid=10000,dmask=0700 - -
===Printing===
===Printing===
Printing to your SME Server depends on your printers being supported by cups
Printing to your SME Server depends on your printers being supported by cups
'''cupsd'''
When you install mepis, when asked you should elect to run cupsd
When you install mepis, when asked you should elect to run cupsd
check with
check and if necessary change with
ls -la /etc/rc5.d/???cupsys
ls -la /etc/rc5.d/???cupsys
cd /etc/rc5.d
cd /etc/rc5.d
mv K19cupsys S19cupsys
mv K??cupsys S20cupsys
'''Configure printer'''
K menu > Settings > Peripherals > Printers
K menu > Settings > Peripherals > Printers
===Ident===
===Ident===
If using Ident Authentication for browsing install 'ident2'
If using Ident Authentication for browsing
apt-get install ident2
===PPTP Connection===
When you install mepis, when asked you should elect to run ppp
To Connect to a remote SME Server
apt-get install pptp-linux kvpnc
K menu > Internet > Connection > VPN Client
===Applications===
*Install VMware, http://www.mepis.org/docs/en/index.php/VMWare#MEPIS_7.0
*Install a subversion client, synaptic -> kdesvn
*Enable mp3 & multimedia
:Synaptic > settings > repositories. Activate the repository for Debian-Multimedia
:Then install Libdvdcss2 and w32codecs
===Settings===
*Thunderbird, to enable links in email
:Advance,General,Config Editor, Right Click, New > String
: preference=network.protocol-handler.app.http, string=firefox
: preference=network.protocol-handler.app.https, string=firefox
*Enable Numlocks
:http://www.mepis.org/node/6937
----
[[Category:Howto]]
[[Category:Howto]]
[[Category:Administration]]
