Mailinglist Archive: opensuse (817 mails)

< Previous Next >
Re: [opensuse] yast access restrictions
On 22/07/12 22:23, Carlos E. R. wrote:

On the contrary. It's more or less in place already. Samba4 has OU, GPO LDAP
and Kerberos
out of the box. Even openLDAP has a schema for Samba3.

For Windows machines, not Linux machines.


Nope. Yast already caters for the openLDAP schema which include both windows and Linux machines. OU, LDAP backends and Krb5 are all there. It's a closely guareded Yast secret because most of us have no idea what the yast Samba Server module can do.


Dare I say that Yast has many resemblances to control panel.

But the underlying permissions system does not.

Hi Carlos, hi everyone.

The underlying permissions (Posix or NT) do indeed allow us to do that already. The Samba guys work _very_ hard to make it do so.

Easy example:
A mapping which lets both Linux and windows admins create a new user with both rfc2307 and windows classes and attributes? That user then has SSO to log onto a windows or Linux clients in the forest. Yast can do that already under Samba3. Try Yast > LDAP Server
L x
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups