[Likewise-open-discuss] Laptops Working inside and outside domain - Likewise-open-discuss Digest, Vol 9, Issue 26 -

Paul Webster pwebster at marsingschools.org
Wed Aug 6 16:10:23 PDT 2008


I have marked my responses*** in line with the original questions and responses.  Thanks for the help.



>    1. Can I set this up so that I can just leave it joined to the
>       domain and always connect with my domain credentials, even when
>       I am outside the domain?  That would prevent all these crazy
>       steps everyday to make things work right both at home and at school.
>
Response from Nicolas Schmitz: You should have winbind offline logon = yes in your /etc/samba/lwiauthd.conf
With that, you can login with your domain credential, even when your
laptop is not on your corporate network. It works for me.

***My Current Response: windbind offline logon = yes was already marked in /etc/samba/lwiauthd.conf
It actually doesn't allow me to use my domain credentials username at MSD.DOMAIN when I am outside the domain at home.  It tells me it is the wrong username or password and reminds me about capitalization.  However, my regular (machine only) username and password work but throw a plain old "error" box that lets me pass and continue working.

2)  Can I setup my users, both my domain user and my non-domain user
>       to be the same account with the same file locations, rights,
>       etc?  I think I should be able to do this in users and groups by
>       adding a user.  The only current user in the Users and Groups is
>       my username, which has admin rights.  Should I set up a new user
>       with admin/root rights that has the username MSD/username ?  I'm
>       afraid I'll screw something up by doing this.
>

Response from Nicolas Schmitz: You can add your  MSD/Username to /etc/sudoers, and only use this one
(this will make your msd/username admin of the box).
I think it's a bad idea to have two different account with the same login.

***My Current Response: I have opened this with the command sudo vi /etc/sudoers in a terminal.  It shows this:
# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#

Defaults        env_reset

# Uncomment to allow members of group sudo to not need a password
# %sudo ALL=NOPASSWD: ALL

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root    ALL=(ALL) ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
Type  :quit<Enter>  to exit Vim

I'm not sure where to put the new domain username that should be in admin group.  I tried to use the Users and Groups GUI in administration but it wouldn't take the punctuation of MSD/username

Where do I put it and how do I format this?  I couldn't find a good manual for this.  I am a bit of a Noob to linux.

Thanks for your help.
pw


Message: 3
Date: Thu, 31 Jul 2008 20:53:29 +0200
From: Nicolas Schmitz <Nicolas.Schmitz at free.fr>
Subject: Re: [Likewise-open-discuss] Laptops Working inside and
        outside domain
To: likewise-open-discuss at lists.likewisesoftware.com
Message-ID: <48920A29.8090706 at free.fr>
Content-Type: text/plain; charset=UTF-8; format=flowed

Hi,

> I, basically, have 2 questions:
>
>    1. Can I set this up so that I can just leave it joined to the
>       domain and always connect with my domain credentials, even when
>       I am outside the domain?  That would prevent all these crazy
>       steps everyday to make things work right both at home and at school.
>
You should have winbind offline logon = yes in your /etc/samba/lwiauthd.conf
With that, you can login with your domain credential, even when your
laptop is not on your corporate network. It works for me.




>   1.
>
>
>
>
>
>    2. Can I setup my users, both my domain user and my non-domain user
>       to be the same account with the same file locations, rights,
>       etc?  I think I should be able to do this in users and groups by
>       adding a user.  The only current user in the Users and Groups is
>       my username, which has admin rights.  Should I set up a new user
>       with admin/root rights that has the username MSD/username ?  I'm
>       afraid I'll screw something up by doing this.
>

You can add your  MSD/Username to /etc/sudoers, and only use this one
(this will make your msd/username admin of the box).
I think it's a bad idea to have two different account with the same login.


-----Original Message-----
From: likewise-open-discuss-bounces at lists.likewisesoftware.com on behalf of likewise-open-discuss-request at lists.likewisesoftware.com
Sent: Thu 7/31/2008 1:00 PM
To: likewise-open-discuss at lists.likewisesoftware.com
Subject: Likewise-open-discuss Digest, Vol 9, Issue 26
 
Send Likewise-open-discuss mailing list submissions to
	likewise-open-discuss at lists.likewisesoftware.com

To subscribe or unsubscribe via the World Wide Web, visit
	http://lists.likewisesoftware.com/cgi-bin/mailman/listinfo/likewise-open-discuss

or, via email, send a message with subject or body 'help' to
	likewise-open-discuss-request at lists.likewisesoftware.com

You can reach the person managing the list at
	likewise-open-discuss-owner at lists.likewisesoftware.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Likewise-open-discuss digest..."


Today's Topics:

   1. Laptops Working inside and outside domain (Paul Webster)
   2. Re: RC script name under solaris (Michael Lampi)
   3. Re: Laptops Working inside and outside	domain (Nicolas Schmitz)


----------------------------------------------------------------------

Message: 1
Date: Thu, 31 Jul 2008 10:23:22 -0600
From: Paul Webster <pwebster at marsingschools.org>
Subject: [Likewise-open-discuss] Laptops Working inside and outside
	domain
To: likewise-open-discuss at lists.likewisesoftware.com
Message-ID: <1217521402.11253.39.camel at pwebster-lpt.msd.domain>
Content-Type: text/plain; charset="us-ascii"

The Likewise Open tool seems to work nicely to join me to my AD domain.
I work in an entirely Microsoft/Windows environment and run Ubuntu 8.04
on a dual boot laptop.  I try not to use the Windows side.

I work a few hours from home outside of our domain every day and then
come into work and work within the domain.  In Windows I just leave the
machine joined to the domain and it logs in fine from home with my usual
domain credentials but tells me that it can't access some servers
(obviously).

In Ubuntu I have to do the following:

     1. Login as username and then password (same as I would use at
        home)
     2. Open LOpen GUI and Join the Domain (MSD.DOMAIN)
     3. Immediately after joining, I have to logout of computer and log
        back in as username at MSD.DOMAIN
     4. It then functions as a normal part of the domain.
     5. Before leaving in the afternoon I have to use LOpen GUI to leave
        the domain and then shut down the computer.  If I don't do this
        then it throws an error on me when logging in at home.
     6. At home I work with my regular username and password (without
        the @MSD.DOMAIN)


I, basically, have 2 questions:
     1. Can I set this up so that I can just leave it joined to the
        domain and always connect with my domain credentials, even when
        I am outside the domain?  That would prevent all these crazy
        steps everyday to make things work right both at home and at
        school.
     2. Can I setup my users, both my domain user and my non-domain user
        to be the same account with the same file locations, rights,
        etc?  I think I should be able to do this in users and groups by
        adding a user.  The only current user in the Users and Groups is
        my username, which has admin rights.  Should I set up a new user
        with admin/root rights that has the username MSD/username ?  I'm
        afraid I'll screw something up by doing this.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.likewisesoftware.com/pipermail/likewise-open-discuss/attachments/20080731/b49e3647/attachment.html 

------------------------------

Message: 2
Date: Thu, 31 Jul 2008 13:58:25 -0400
From: "Michael Lampi" <mlampi at likewisesoftware.com>
Subject: Re: [Likewise-open-discuss] RC script name under solaris
To: Lanthier, St?phanie <lanthier.stephanie at uqam.ca>,
	<likewise-open-discuss at lists.likewisesoftware.com>
Message-ID:
	<A4670A1B9F4A714DA683071F29FC5A390E074F88 at ms08.mse3.exchange.ms>
Content-Type: text/plain;	charset="utf-8"


Hi St?phanie,

Thanks for informing us about this. We'll fix this shortly.

Michael Lampi 
Quality Assurance and Support Manager
Likewise Software, Inc.
T?425.378.7887?x221?F?425.484.6316??M?425.765.3976?E mlampi at likewisesoftware.com

15395 SE 30th Place, Suite 140
Bellevue, WA 98007 
www.likewisesoftware.com




-----Original Message-----
From: likewise-open-discuss-bounces at lists.likewisesoftware.com [mailto:likewise-open-discuss-bounces at lists.likewisesoftware.com] On Behalf Of Lanthier, St?phanie
Sent: Thursday, July 31, 2008 7:11 AM
To: likewise-open-discuss at lists.likewisesoftware.com
Subject: [Likewise-open-discuss] RC script name under solaris

Hi, I just want to signal a detail.

Under Solaris, three rc scripts are installed in the /etc/rc2.d directory.

One of them is : S9centeris.rpcd

The usual solaris naming pattern should be : S09centeris.rpcd

Best regards
__________________

St?phanie Lanthier

Analyste de l'informatique
Universit? du Qu?bec ? Montr?al
Service de l'informatique et des t?l?communications
lanthier.stephanie at uqam.ca
T?l?phone : 514-987-3000 poste 6106
Bureau : PK-M535

 


_______________________________________________
Likewise-open-discuss mailing list
Likewise-open-discuss at lists.likewisesoftware.com
http://lists.likewisesoftware.com/cgi-bin/mailman/listinfo/likewise-open-discuss

------------------------------

Message: 3
Date: Thu, 31 Jul 2008 20:53:29 +0200
From: Nicolas Schmitz <Nicolas.Schmitz at free.fr>
Subject: Re: [Likewise-open-discuss] Laptops Working inside and
	outside	domain
To: likewise-open-discuss at lists.likewisesoftware.com
Message-ID: <48920A29.8090706 at free.fr>
Content-Type: text/plain; charset=UTF-8; format=flowed

Hi,

> I, basically, have 2 questions:
>
>    1. Can I set this up so that I can just leave it joined to the
>       domain and always connect with my domain credentials, even when
>       I am outside the domain?  That would prevent all these crazy
>       steps everyday to make things work right both at home and at school.
>
You should have winbind offline logon = yes in your /etc/samba/lwiauthd.conf
With that, you can login with your domain credential, even when your 
laptop is not on your corporate network. It works for me.




>   1.
>
>
>
>
>
>    2. Can I setup my users, both my domain user and my non-domain user
>       to be the same account with the same file locations, rights,
>       etc?  I think I should be able to do this in users and groups by
>       adding a user.  The only current user in the Users and Groups is
>       my username, which has admin rights.  Should I set up a new user
>       with admin/root rights that has the username MSD/username ?  I'm
>       afraid I'll screw something up by doing this.
>

You can add your  MSD/Username to /etc/sudoers, and only use this one 
(this will make your msd/username admin of the box).
I think it's a bad idea to have two different account with the same login.



------------------------------

_______________________________________________
Likewise-open-discuss mailing list
Likewise-open-discuss at lists.likewisesoftware.com
http://lists.likewisesoftware.com/cgi-bin/mailman/listinfo/likewise-open-discuss


End of Likewise-open-discuss Digest, Vol 9, Issue 26
****************************************************

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 8354 bytes
Desc: not available
Url : http://lists.likewisesoftware.com/pipermail/likewise-open-discuss/attachments/20080806/5be2d903/attachment-0001.bin 


More information about the Likewise-open-discuss mailing list