[uyuni-users] Salt + AD + sssd
Hi, I'd like so setup our SLES-15 clients to use an active directory (Microsoft) for user authentication. I already have a SLES-15 machine that is running this configuration using sssd and it works fine. So there is a verified installation description for a manual setup available. Now I want to automate this configuration procedure. As far as I understood Uyuni is using Salt Formulas for these kind of configuration jobs (?). Looking at the opensuse-15.1 repositories (zypper se --type package formula) and at https://github.com/saltstack-formulas I haven't found anything to address this issue but maybe I just used the wrong search words. Any hints? Regards, Tobias. -- To unsubscribe, e-mail: uyuni-users+unsubscribe@opensuse.org To contact the owner, e-mail: uyuni-users+owner@opensuse.org
Hi Depending on what you want to achieve, one of these may be what you are looking for: * LDAP via PAM: https://github.com/saltstack-formulas/pam-formula * Join AD domain and delegate authentication: https://github.com/plus3it/join-domain-formula * Everything manually: https://mywushublog.com/2013/12/active-directory-authentication-with-salt/ There are even other alternatives, e. g. SSSD. Thank you Pau Garcia Quiles SUSE Manager Product Owner & Technical Project Manager SUSE Software Solutions Spain ________________________________ De: Crefeld, Tobias LKV Bayern e.V. <Tobias.Crefeld@lkv.bayern.de> Enviado: viernes, 27 de marzo de 2020 19:08 Para: 'uyuni-users@opensuse.org' <uyuni-users@opensuse.org> Asunto: [uyuni-users] Salt + AD + sssd Hi, I'd like so setup our SLES-15 clients to use an active directory (Microsoft) for user authentication. I already have a SLES-15 machine that is running this configuration using sssd and it works fine. So there is a verified installation description for a manual setup available. Now I want to automate this configuration procedure. As far as I understood Uyuni is using Salt Formulas for these kind of configuration jobs (?). Looking at the opensuse-15.1 repositories (zypper se --type package formula) and at https://github.com/saltstack-formulas I haven't found anything to address this issue but maybe I just used the wrong search words. Any hints? Regards, Tobias. -- To unsubscribe, e-mail: uyuni-users+unsubscribe@opensuse.org To contact the owner, e-mail: uyuni-users+owner@opensuse.org
Am Fri, 27 Mar 2020 23:31:23 +0000 schrieb Pau Garcia Quiles <pau.garcia@suse.com>:
Depending on what you want to achieve, one of these may be what you are looking for:
- LDAP via PAM: https://github.com/saltstack-formulas/pam-formula
- Join AD domain and delegate authentication: https://github.com/plus3it/join-domain-formula
- Everything manually: https://mywushublog.com/2013/12/active-directory-authentication-with-salt/
Thanks for these hints! I will check them out.
There are even other alternatives, e. g. SSSD.
The "manual" setup that I'm using is based on sssd. I prefer this approach because it's offering a kind of credential caching. This is providing some independence of the AD domain controllers which might be unavailable temporarily. -- Regards, Tobias Crefeld. xmpp (no email): crefeld@xabber.de -- To unsubscribe, e-mail: uyuni-users+unsubscribe@opensuse.org To contact the owner, e-mail: uyuni-users+owner@opensuse.org
Am Sun, 29 Mar 2020 19:56:18 +0200 schrieb Tobias Crefeld <tclx@klekih-petra.de>:
The "manual" setup that I'm using is based on sssd. I prefer this approach because it's offering a kind of credential caching. This is providing some independence of the AD domain controllers which might be unavailable temporarily.
Just to complete this issue: I found a pretty good commented description for an AD integration using sssd at https://mwbrown.org/2018/05/10/ad-for-debian-with-saltstack/ . The post is about integrating a Debian system, not a SLES machine but with the helpful blog post at https://www.suse.com/c/the-sssd-active-directory-and-sles-12-and-15/ it is possible to do the necessary adaptations for SLES. For Salt newbies with few Python experience like me a reference like https://docs.saltstack.com/en/latest/py-modindex.html is important to do the adaptations. Actually this approach is based on sls files that were created (per vi) below /srv/salt and /srv/pillar starting with top.sls files. So it's not using the Configuration management or the Salt formulas of Uyuni's WebUI. The execution process can get triggered via WebUI with Systems / System Groups / "Apply system states" and below "Schedule" you can monitor the results. -- Gruss, Tobias Crefeld. xmpp (no email): crefeld@xabber.de -- To unsubscribe, e-mail: uyuni-users+unsubscribe@opensuse.org To contact the owner, e-mail: uyuni-users+owner@opensuse.org
participants (3)
-
Crefeld, Tobias LKV Bayern e.V. -
Pau Garcia Quiles -
Tobias Crefeld