Changes

Jump to navigation Jump to search
m
categorisation
Line 6: Line 6:     
==Client configuration==
 
==Client configuration==
SME Server's has been and remains focused on serving windows clients, however Linux clients also work well with SME.
+
{{Level|advanced}}
   −
These instructions work for Mepis 6.5 and 7.0
+
SME Server's has been and remains focused on serving windows clients, however Linux clients also work well with SME Server.
 +
 
 +
These instructions are  current for Mepis 7.0 and SME Server 7.3
 +
 
 +
Client configuration was originally based on http://tech.canterburyschool.org/tech/UbuntuWorkstations.
    
===Domain Login===
 
===Domain Login===
 
A Domain login lets users login without admin setting up each user first.
 
A Domain login lets users login without admin setting up each user first.
   −
You can use these command line instructions or use your GUI tools.<br>
+
====Client configuration====
Comment out the existing setting and paste the new
  −
 
   
  apt-get install winbind libpam-mount
 
  apt-get install winbind libpam-mount
   Line 21: Line 23:  
   
 
   
 
  workgroup = 'Your Windows workgroup'  # probably correct, you set this during install
 
  workgroup = 'Your Windows workgroup'  # probably correct, you set this during install
  security = domain                    # may be set to user
+
  security = domain                    # edit, set to user
  idmap uid = 10000-20000
+
  wins server 192.168.1.1              # edit, to your server IP
  idmap gid = 10000-20000
+
;password server = *                  # remove line
 +
winbind uid = 10000-20000
 +
  winbind gid = 10000-20000
 
  template shell = /bin/bash
 
  template shell = /bin/bash
 
  template homedir = /home/%U
 
  template homedir = /home/%U
Line 29: Line 33:  
  winbind enum groups = yes
 
  winbind enum groups = yes
 
  winbind cache time = 10
 
  winbind cache time = 10
  winbind separator = +
+
  winbind separator = /
password server = *
   
  winbind use default domain = yes
 
  winbind use default domain = yes
 +
acl compatibility = winnt
    
  nano -w /etc/nsswitch.conf
 
  nano -w /etc/nsswitch.conf
Line 38: Line 42:  
  group: compat winbind
 
  group: compat winbind
 
  shadow: compat winbind
 
  shadow: compat winbind
 +
hosts:  files wins dns
    
  nano -w /etc/pam.d/common-account
 
  nano -w /etc/pam.d/common-account
Line 47: Line 52:  
   
 
   
 
  auth    required        pam_mount.so
 
  auth    required        pam_mount.so
  #
+
   
## use the follolwing "auth" line by itself to restrict local access (a bit paranoid) -
   
  ## will validate ONLY off of network
 
  ## will validate ONLY off of network
 
  #auth  required        pam_winbind.so use_first_pass
 
  #auth  required        pam_winbind.so use_first_pass
  #
+
   
## use the TWO "auth" lines below for either network or local validation -
   
  ## will validate off of EITHER network or local passwd db
 
  ## will validate off of EITHER network or local passwd db
 
  auth    sufficient      pam_winbind.so use_first_pass
 
  auth    sufficient      pam_winbind.so use_first_pass
Line 63: Line 66:  
  session optional        pam_mount.so
 
  session optional        pam_mount.so
   −
This is where SME doesn't support linux clients as well as windows, so... logon to your SME Server
+
optional, do later if needed, add to
   
+
  nano -w /etc/hosts
To check your client values > K menu > Setting Configuration > Internet and Networking > Samba <br>
+
  192.168.1.1        YourServername
'''ClientName''' is the NetBIOS Name, NOTE: you must add the trailing $ <br>
  −
'''Workgroup''' should be your SME Server Workgroup <br>
     −
  signal-event machine-account-create  ClientName$
+
  /etc/init.d/samba restart
  smbpasswd -a -m ClientName$
+
  /etc/init.d/winbind restart
 
  −
Now back to mepis and join the workgroup/domain
  −
  net rpc join -D WorkGroup -U admin
  −
 
  −
Ideas borrowed from http://tech.canterburyschool.org/tech/UbuntuWorkstations , Thanks !
      
If you misconfigure a file and lock yourself out of the workstation <br>
 
If you misconfigure a file and lock yourself out of the workstation <br>
Line 82: Line 78:  
login as root and check your config files
 
login as root and check your config files
   −
===Mounting Shares===
+
====Connect to domain====
You have two options, pam_mount will work if you use domain logins, smb4k will work with or without
+
on SME 7.3 and above
   −
====pam_mount.conf====
+
On the client [''Workgroup'' is your SME Server Workgroup]
mount you server home directory (&) and ibays
+
and admin may be any user in the 'domain-admin' group
 +
net rpc join -D '''WorkGroup''' -U admin
   −
nano -w /etc/security/pam_mount.conf
+
Log out, and now you should have all your SME Users in your login 'user list'
   −
volume * smbfs servername  &    /home/&/Desktop/&        uid=&,gid=10000,dmask=0700 - -
+
====Mounting Shares====
volume * smbfs servername  ibay1    /home/&/Desktop/ibay1        uid=&,gid=10000,dmask=0700 - -
+
pam_mount works well if you use domain logins, other methods are too much trouble.
   −
====smb4k====
+
mount your server home directory and ibays
Mount any Samba share in you local network with smb4k
     −
K menu > Internet > Connection > Smb4k File Browser
+
nano -w /etc/security/pam_mount.conf
 
+
Create a password for your Kwallet
+
volume * smbfs servername  &    /home/&/Desktop/&      uid=&,gid=10000,dmask=0700 - -
 
+
volume * smbfs servername  ibay1 /home/&/Desktop/ibay1  uid=&,gid=10000,dmask=0700 - -
Settings > Configure, and configure to suit
  −
 
  −
Click on your Server and the share you wish to mount
  −
 
  −
To have smb4k run on startup
  −
 
  −
Right click, send to desktop, K menu > Internet > Connection > Smb4k File Browser
  −
 
  −
Open your documents folder, menu > view > show hidden files
  −
 
  −
Drag the shortcut to the folder /home/stephen/.kde/Autostart, create if neccesary
      
===Printing===
 
===Printing===
 
Printing to your SME Server depends on your printers being supported by cups
 
Printing to your SME Server depends on your printers being supported by cups
   −
====cupsd====
+
'''cupsd'''
 +
 
 
When you install mepis, when asked you should elect to run cupsd
 
When you install mepis, when asked you should elect to run cupsd
   −
check with
+
check and if necessary change with
 
  ls -la /etc/rc5.d/???cupsys
 
  ls -la /etc/rc5.d/???cupsys
if necessary
   
  cd /etc/rc5.d
 
  cd /etc/rc5.d
  mv K19cupsys S19cupsys
+
  mv K??cupsys S20cupsys
 +
 
 +
'''Configure printer'''
   −
====Configure printer====
   
K menu > Settings > Peripherals > Printers
 
K menu > Settings > Peripherals > Printers
   Line 140: Line 126:     
===Ident===
 
===Ident===
If using Ident Authentication for browsing install 'ident2'
+
If using Ident Authentication for browsing  
 +
apt-get install ident2
 +
 
 +
 
 +
===PPTP Connection===
 +
When you install mepis, when asked you should elect to run ppp
 +
 
 +
To Connect to a remote SME Server
 +
apt-get install pptp-linux kvpnc
 +
 
 +
K menu > Internet > Connection > VPN Client
 +
 
 +
===Applications===
 +
*Install VMware,  http://www.mepis.org/docs/en/index.php/VMWare#MEPIS_7.0
 +
 
 +
*Install a subversion client, synaptic -> kdesvn
 +
 
 +
*Enable mp3 & multimedia
 +
:Synaptic > settings > repositories. Activate the repository for Debian-Multimedia
 +
:Then install Libdvdcss2 and w32codecs
 +
 
 +
===Settings===
 +
*Thunderbird, to enable links in email
 +
:Advance,General,Config Editor, Right Click, New > String
 +
: preference=network.protocol-handler.app.http, string=firefox
 +
: preference=network.protocol-handler.app.https, string=firefox
    +
*Enable Numlocks
 +
:http://www.mepis.org/node/6937
    +
----
 
[[Category:Howto]]
 
[[Category:Howto]]
 +
[[Category:Administration]]

Navigation menu