Integrating Ubuntu based workstations in IPBrick s domain

Transcription

1 Integrating Ubuntu based workstations in IPBrick s domain IPBRICK International November 29,

2 Contents 1 Introduction 3 2 IPBrick servers Setup Datasheet IPBrick.I server - Intranet Master Intranet Setup Communications Setup 4 4 Intranet server setup 5 5 Workstations setup Operating System Base Software

3 1 Introduction This document endeavors to guide you through the process of integrating Ubuntu based workstations in IPBrick s domain. 2 IPBrick servers Setup Datasheet 2.1 IPBrick.I server - Intranet Master Technical Data: Current Software Version - IPBrick 5.3 Server features: Intranet Master with mail, PDC and fileserver. administrator@domain.com Base Definitions: Name: ipbrick Domain: domain.com ETH0: / Gateway: DNS: Authentication Mode: Master Enabled Services and Automatic Startup: SMTP POP3 IMAPS POP3S SAMBA IMAP DNS 3

4 POSTGRESQL DHCP APACHE NTP Authentication credentials: admin: operator: L1opardo root: R0laBill kaspersky: L1opardo spam: L1opardo rcvdmail: L1opardo sentmail: L1opardo 2.2 Intranet Setup Intranet setup definitions. This information on internal organization of services and servers is very important for future reference when setting up new workstations or servers in the LAN. DNS: WINS: DHCP: Gateway: NS Domain: domain.com NetBIOS: DOMAIN AD: - 3 Communications Setup Communications services setup definitions: proxy, firewall, QoS, routes, etc. Again this is very important data to future reference for setting up new workstations or servers in the LAN. IP Networks, Proxy rules, firewall rules, Networks and Gateways, VPN networks, IPSec tunnels, QoS. To all purposes, in this document, the gateway is a router. 4

5 4 Intranet server setup At the server s web interface, create a new user (linuxuser): login: linuxuser password: linuxuser123 This user will allow workstations to bind with the LDAP domain. 5 Workstations setup 5.1 Operating System Workstations are installed with UBUNTU Base Software The software necesary to install is essentially: the LDAP client and NFS. It will require internet access to download the packages. Follow these instructions step by step. Run as super-user (root): apt-get update apt-get install libnss-ldap libpam-ldap nfs-common portmap nscd autofs-ldap ldap:// dc=domain,dc=com LDAP Version: 3 Make local root Database Admin: No Does LDAP database require login: Yes uid=linuxuser,ou=users,dc=domain,dc=com linuxuser123 vi /etc/ldap.conf bind_policy soft vi /etc/nsswitch.conf 5

6 passwd: compat ldap group: compat ldap shadow: compat ldap #vi /etc/lightdm/lightdm.conf [SeatDefaults] user-session=ubuntu greeter-session=unity-greeter allow-guest=false greeter-show-manual-login=true /etc/init.d/nscd restart Now it will be possible to authenticate IPBrick (LDAP) users on the workstation. However, it will still be necessary to setup the NFS client (automount).!attention!: The following instructions must be executed in the Linux console by the root user and not by any other. Let s assume the user created during initial installation has the operator login. cd / mv home homelocal mkdir home vi /etc/passwd operator::/homelocal/operator The next step is to configure the NFS client (automount) vi /etc/auto.master /home ldap: :ou=auto.home,dc=domain,dc=com 6

7 #vi /etc/default/autofs DEFAULT_MAP_OBJECT_CLASS="organizationalUnit" DEFAULT_ENTRY_OBJECT_CLASS="automount" DEFAULT_MAP_ATTRIBUTE="ou" DEFAULT_ENTRY_ATTRIBUTE="cn" DEFAULT_VALUE_ATTRIBUTE="automountInformation" /etc/init.d/autofs stop /etc/init.d/autofs start The final procedure is to force a reload of configurations after the workstation reboots. vi /etc/rc.local /usr/sbin/invoke-rc.d nscd restart /bin/sleep 5 /usr/sbin/invoke-rc.d gdm restart /usr/sbin/invoke-rc.d autofs restart exit 0 The workstation setup is now complete. Before proceeding please reboot it and check that everything is working as expected.!attention!: In order for the NFS service to work properly it is necessary to have a well configured DNS service, both forward and reverse lookup and that both the NFS clients and the servers are registered at the DNS. 7