Active Directory/LDAP/NFS/Fedora DS Oh my

dadams982 · 06-24-2009, 10:35 AM

So this will be my hello message as well as a question I have been pondering and researching none stop.

So I am fairly new to Linux, been a Windows Admin in the military for a long time. Well I have separated and joined a great organization and got thrown into a mixed environment. Well, one of my goals given when hired was implementing Active Directory for the workgrouped computers, which that is not a problem. When looking at the network layout though, many improvements need to be made, as it is right now administering it is a nightmare.

So we have quite a few Linux servers, all requiring each user to have an account established on each and every machine. Same with the Windows Workgroup (Which will be resolved with AD).

Here is my confusion,

Right now each user maps to their UID/GUID through a PCNFSD server to the NFS server (Which will be upgraded to NFSv4) We want to remove the PCNFSD server because it is old and needs to go.

I want to begin implementation of Fedora DS (Since it seems to integrate well with AD).

How can I make AD map UIDs to LDAP (Fedora DS) to authenticate to the NFS server. I hope that made sense. Basically is there a piece I am missing such as say Samba or something? Should I use samba to name map Windows ID with UIDs via LDAP to authenticate to NFS?

Man, I hope I am wording that right. if you need any information for me to clarify, please just let me know, i am kind of learning as I go, and find the is so many ways to do things, that I do not want to get it wrong.

custangro · 06-24-2009, 10:50 AM

Quote:

Originally Posted by dadams982

So this will be my hello message as well as a question I have been pondering and researching none stop.

So I am fairly new to Linux, been a Windows Admin in the military for a long time. Well I have separated and joined a great organization and got thrown into a mixed environment. Well, one of my goals given when hired was implementing Active Directory for the workgrouped computers, which that is not a problem. When looking at the network layout though, many improvements need to be made, as it is right now administering it is a nightmare.

So we have quite a few Linux servers, all requiring each user to have an account established on each and every machine. Same with the Windows Workgroup (Which will be resolved with AD).

Here is my confusion,

Right now each user maps to their UID/GUID through a PCNFSD server to the NFS server (Which will be upgraded to NFSv4) We want to remove the PCNFSD server because it is old and needs to go.

I want to begin implementation of Fedora DS (Since it seems to integrate well with AD).

How can I make AD map UIDs to LDAP (Fedora DS) to authenticate to the NFS server. I hope that made sense. Basically is there a piece I am missing such as say Samba or something? Should I use samba to name map Windows ID with UIDs via LDAP to authenticate to NFS?

Man, I hope I am wording that right. if you need any information for me to clarify, please just let me know, i am kind of learning as I go, and find the is so many ways to do things, that I do not want to get it wrong.

This is a good howto: http://www.linuxmail.info/ad-fds-sync-howto/

Then you can have something like this...

Code:

Active Directory (user info replicates) ==> Fedora DS (Holds User information) ==> NFS Server Uses Fedora DS for user information (thus having the same IDs)

dadams982 · 06-24-2009, 10:56 AM

Quote:

Originally Posted by custangro

This is a good howto: http://www.linuxmail.info/ad-fds-sync-howto/

Then you can have something like this...

Code:

Active Directory (user info replicates) ==> Fedora DS (Holds User information) ==> NFS Server Uses Fedora DS for user information (thus having the same IDs)

Wow... great read... Nice integration. So when I upgrade the NFS Server to 4, I can point to the fedora DS? All our NFS shares are mounted on one server, soooo... that is where I stand.

custangro · 06-24-2009, 11:05 AM

Quote:

Originally Posted by dadams982

Wow... great read... Nice integration. So when I upgrade the NFS Server to 4, I can point to the fedora DS? All our NFS shares are mounted on one server, soooo... that is where I stand.

What OS is the NFS server running?

-C

dadams982 · 06-24-2009, 11:13 AM

Quote:

Originally Posted by custangro

What OS is the NFS server running?

-C

SLES 9.1, going up to 10 soon when I can get approval (It is on a closed network).

dadams982 · 06-24-2009, 11:32 AM

Forgot one piece. Right now we have NFS Maestro on the windows machines. Will I need an NFS client still when I make these changes? Like will I have to point NFS Maestro to the LDAP instead of the PCNFSD. I know support in windows to NFS is limited at best.

dadams982 · 06-24-2009, 12:20 PM

Did I scare everyone away?

custangro · 06-24-2009, 12:43 PM

Quote:

Originally Posted by dadams982

Forgot one piece. Right now we have NFS Maestro on the windows machines. Will I need an NFS client still when I make these changes? Like will I have to point NFS Maestro to the LDAP instead of the PCNFSD. I know support in windows to NFS is limited at best.

Yes NFS support is limited on Windows...

You may want to consider exporting the NFS shares as samba shares as well...not sure how you set up is, so you will have to do some homework...

-C

dadams982 · 06-24-2009, 12:58 PM

Quote:

Originally Posted by custangro

Yes NFS support is limited on Windows...

You may want to consider exporting the NFS shares as samba shares as well...not sure how you set up is, so you will have to do some homework...

-C

Okay, then I guess my best bet it so point NFS Maestro to a name mapping server like I have now. Does Fedora DS handle this by chance, or should I install something like MS Services for NFS? I know Samba gives a performance hit, and we handle all satellite imagery, so need all the speed we can get!

Thanks for the help!