[OpenAFS] Windows client options

[Jeffrey Altman]

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig5955BA72C0DF1A95D089D097
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 12/19/2010 11:58 AM, Jaap Winius wrote:
> Quoting Jeffrey Altman <jaltman@secure-endpoints.com>:
>=20
>> OpenLDAP is not a replacement for Active Directory.  You either need t=
o
>> manage local Windows accounts that are mapped to Kerberos identities f=
or
>> logon or you need to use Active Directory (or an Active Directory
>> equivalent) to manage the accounts for you.
>>
>> In either case, once you have accounts defined for users those account=
s
>> can have roaming profiles stored in AFS.
>=20
> Quoting Lars Schimmer <l.schimmer@cgv.tugraz.at>:
>=20
>> Sure it is. Just enter the path to the profile like
>> \\AFS\cgv.tugraz.at\home\user\winprofile
>> and enable "pbtain tokens at login" for the workstation.
>> Be sure for AD server can access the path to the user profile (l ACL
>> should be enough). ...
>=20
> Okay, it sounds like Active Directory would be the best solution.
> However, seeing as this is strictly an Open-Source project (apart from
> those few Windows clients running a couple of proprietary apps), I woul=
d
> not be able to use any Windows servers for that. I guess it would have
> to be Samba. Still doable?

Samba 4 is not production quality yet.  When it is, it can be used as an
AD replacement.



--------------enig5955BA72C0DF1A95D089D097
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBAgAGBQJNDmnNAAoJENxm1CNJffh4KUkH/3wh8EXOBA2ZK7I/tZJ8KzzV
vLwCZTaAMLEQsBpCPHxg4EX7bZfay+rldRLUeEX1uSfGiHvR85wnn4zXyh98FFxr
D5KC6sYViTC++Tvl3muyGL9af+jAvt1FppguLk1R9hajLqCcsmlnJbDtYcHGKLT5
DmvEGOT902pVhg2onlL4jVqIhGninNBlcys1dNAOPDr3jOocXPbfLrzCXuJVeMI6
+unTn6+mYa8YsgScs7JXmzHdwyUv/OFHoZ/Lnqx3DM1h2SgunBrNFcJ4yE8PPxKO
P1qBwj4JUBSvx7pnPi8WSIG96U/uGazPQfZJmuHP5CHw5qrA5jrs7phcUGz4vps=
=8zBY
-----END PGP SIGNATURE-----

--------------enig5955BA72C0DF1A95D089D097--