Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've recently setup a small test network with an Ubuntu server and Ubuntu clients. People can login to a client machine using an account stored in LDAP (created using ldapadduser from the ldapscripts package).

The problem has arisen when it came to sharing home dirs from the server using NFS. The only secure way to do this in the environment which it is eventually going to be deployed is using Kerberos.

I can share home dirs using nfs and kerberos fine, however, this means that every ldap user also needs a kerberos principal creating. Is there a common way of managing such a system? I can't find any standard tools (GUI or CLI) for managing what I would have thought is a very common setup?

Perhaps I'm going about things the wrong way?

share|improve this question
add comment

1 Answer 1

up vote 0 down vote accepted

Have you looked into FreeIPA yet? It is a Redhat project for fedora, but it does exactly what you are looking for. Can you use a Fedora server instead of a Ubuntu one? If so it will take care of stuff for you.

I setup an Ubuntu server and client setup here, I wish I had used FreeIPA instead. If you can configure Ubuntu desktops to work off a LDAP / Kerberos setup, you can do go against the FreeIPA stack as well, its just more work then using Fedora for both sides.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.