Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
|
09-06-2005, 06:14 AM
|
#1
|
Senior Member
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,638
Rep: 
|
Logon with KNOPPIX / Linux to a Win-Domain?
Well, at work I have to use a Win2000 workstation.
I do have a KNOPPIX CD though ...  .
Problem is, the internet proxy of our LAN expects the authorization by the standard Windows IDs (?), probably domain name and name of the machine. Can I -- and if so, how -- supply them to that proxy? Anybody any experiences?
Or, more generally asking, has anybody experiences connecting a Linux-box to a Win-net as a normal worstation? What would one need? How does one do it?
|
|
|
09-06-2005, 10:10 AM
|
#2
|
Member
Registered: Dec 2004
Location: Chennai, India
Distribution: Red Hat, Knoppix
Posts: 86
Rep:
|
For internet browsing, you can configure your Mozilla to use a proxy server and enter authentication details....
For connecting Linux to a Windows Network(AD Domain ?) ... you can either choose to do it via Samba or there is another way to do it by installing SFU 3.5 in your DC's and get NIS authentication for Linux Clients from AD Domain users.
|
|
|
09-07-2005, 02:45 AM
|
#3
|
Senior Member
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,638
Original Poster
Rep: 
|
Quote:
Originally posted by anand_kt
For internet browsing, you can configure your Mozilla to use a proxy server and enter authentication details....
|
Wrong use of the term "Proxy" on my part, sorry. I must still connect to the domain controller first (before browsing), since internet is handled over the LAN as well.
Quote:
Originally posted by anand_kt For connecting Linux to a Windows Network(AD Domain ?) ... you can either choose to do it via Samba or there is another way to do it by installing SFU 3.5 in your DC's and get NIS authentication for Linux Clients from AD Domain users.
|
What is an AD domain? But okay, so I'll have to read up on samba and about authentification / indentification there. I never heard of SFU, but google (or rather clusty ( http://clusty.com)) is my friend -- same goes for NIS.
On the other hand, I have no access to the domain-controller, I have to entirely simulate a Windows client using Knoppix. Is there no software (module) in Linux to simulate a Windows client "on the fly"?
Thank you for answering  .
|
|
|
09-07-2005, 01:35 PM
|
#4
|
Member
Registered: Dec 2004
Location: Chennai, India
Distribution: Red Hat, Knoppix
Posts: 86
Rep:
|
I still am totally confused about how you configure internet access in your network... you have to use a proxy/gatewat/router/bridge something to get out of your LAN... as long as you are clear, fine.
AD is Active Directory... were you sarcastic when you asked what is AD ?
|
|
|
09-08-2005, 03:04 AM
|
#5
|
Senior Member
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,638
Original Poster
Rep: 
|
Quote:
Originally posted by anand_kt I still am totally confused about how you configure internet access in your network... you have to use a proxy/gatewat/router/bridge something to get out of your LAN... as long as you are clear, fine.
|
Well, I don't configure the internet access at all. In our outfit I am a simple user -- and our admins deny even reading access to almost everything, for example I can't even change the resolution of my display ...  .
So, this is a Win-only outfit and I am part of a LAN the structure of which is unknown to me. My box just lets me access a central file server, a mail server and the internet (by its error messages I know that they have got an ISA-server in the data center). I can boot Knoppix and I want to try to access the net from that -- but for this I must log on to the domain server and that's what I don't know how to do under Linux.
Quote:
Originally posted by anand_kt AD is Active Directory... were you sarcastic when you asked what is AD ?
|
Certainly not! Why would I insult the first guy who has some answers? This is not the first time this question was asked on LQ but the only response I found so far. So again, no, I did not know that AD stood for active directory, and thanks again for your help.
P.S.: This is just to gain knowledge for me, you know, there is no real project here -- most folks are fixated on Win here, but I like to try things... 
Last edited by JZL240I-U; 09-08-2005 at 03:07 AM.
|
|
|
09-08-2005, 01:31 PM
|
#6
|
Member
Registered: Dec 2004
Location: Chennai, India
Distribution: Red Hat, Knoppix
Posts: 86
Rep:
|
i am not very well versed with ISA although i have had some in my setup before, but... is logging on to the domain absolutely mandatory? even for accessing the ISA... domain logon is a must ?
if thats the case, forget it, there is just no proper solution for this at all... there is one AD integration solution called `vinetta` or something which i have not tried, and there is of coruse SFU, but SFU requires altering the AD schema on the DCs and stuff for which u will not have access am sure...
but still still, does ISA requires domain login? i think no...
|
|
|
09-09-2005, 02:36 AM
|
#7
|
Senior Member
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,638
Original Poster
Rep: 
|
Quote:
Originally posted by anand_kt i am not very well versed with ISA although i have had some in my setup before, but... is logging on to the domain absolutely mandatory? even for accessing the ISA... domain logon is a must ?
|
To my knowledge it is, I guess the DC is also the gateway(?) to the ISA, so I am caught...
Quote:
Originally posted by anand_kt if thats the case, forget it, there is just no proper solution for this at all... there is one AD integration solution called `vinetta` or something which i have not tried, and there is of coruse SFU, but SFU requires altering the AD schema on the DCs and stuff for which u will not have access am sure...
|
So I guess I am stumped. Well, it was worth a try ... though I wonder why the Linux community hasn't brought up an answer to easily integrate Linux-workstations in a Win-Domain/Network.
Quote:
Originally posted by anand_kt but still still, does ISA requires domain login? i think no...
|
In and of itself probably not but in our setup ... see above.
Quote:
Originally posted by anand_kt Chennai, India.
|
Sounds like an interesting place where just about everything is done, I read up on it in Wikipedia (and I like what is called here Marsala Curry (the spice))  .
Last edited by JZL240I-U; 09-09-2005 at 02:40 AM.
|
|
|
09-09-2005, 09:13 AM
|
#8
|
Member
Registered: Dec 2004
Location: Chennai, India
Distribution: Red Hat, Knoppix
Posts: 86
Rep:
|
*Masala Curry*
:-)
|
|
|
09-09-2005, 09:14 AM
|
#9
|
Member
Registered: Dec 2004
Location: Chennai, India
Distribution: Red Hat, Knoppix
Posts: 86
Rep:
|
Havent you tasted(or heard of) "Dosa" or "Idly" or "Vada" .... or "Sambar" or "Chutney"
(mods, excuse me)
|
|
|
09-09-2005, 09:20 AM
|
#10
|
Senior Member
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,638
Original Poster
Rep: 
|
Umm, right, my bad (see http://en.wikipedia.org/wiki/Curry).
Still, I use curries from the british firm "Patak" and I think they spell Masala with "r". I'll check it tonight when we'll barbecue  .
<edit> Well, "Patak" writes "Masala" as well. Dunno where I got that surplus "r" from... </edit>
Last edited by JZL240I-U; 10-05-2005 at 02:53 AM.
|
|
|
09-09-2005, 09:25 AM
|
#11
|
Senior Member
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,638
Original Poster
Rep: 
|
Quote:
Originally posted by anand_kt
Havent you tasted(or heard of) "Dosa" or "Idly" or "Vada" .... or "Sambar" or "Chutney"
|
Neither "Dosa", nor "Idly"or "Vada" but Samba l as in Sambal O(e)leg and of course Chutney. I'll google/Wikipedia for it.
<edit> Did that, found them all. Looks delicious  </edit>
Quote:
Originally posted by anand_kt (mods, excuse me)
|
Me too  .
Last edited by JZL240I-U; 09-09-2005 at 09:33 AM.
|
|
|
10-04-2005, 08:36 AM
|
#12
|
LQ Newbie
Registered: Oct 2005
Posts: 6
Rep:
|
I have the answer (ish)
This may be an old subject and I'm late for the party, but I thought I'd chip in incase anyone re-reads the thread.
Active Directory is one way to get what your after (browsing through a proxy) and I've mentioned it below, as it's useful for Linux clients in a Microsoft Domain.
What you really need though is APS (NTLM Authorization Proxy Server) the reason for this is that if your company is using ISA (MS proxy server) you need to send your domain information with every request - NB this is not the same as joining the domain.
What APS does is:
* create a local proxy server (just for you if you wish) that runs on your linux (or Solaris) box.
* Attaches your domain credentials to every proxy request and gives it in an approved NTLM authorization.
you then set up your services (eg firefox) to proxy via 127.0.0.1  ort and it will add your domain details.
You can also use this to use apt-get/yum/wget/lynx and just about everything else that can use a proxy
APS:
You need PYTHON installed, and the APS files from here http://freshmeat.net/projects/ntlmaps/
and that's it.
If you want to join the domain (this won't help your proxy problem, but will let you access files) I have put the pointers below
Active Directory Access
This is possible using SAMBA, OPEN LDAP and KERBEROS. There is a full tutorial at samba.org
Look here for starters http://us3.samba.org/samba/docs/man/...html#id2541340
I hope this helps
@
g
|
|
|
10-04-2005, 08:52 AM
|
#13
|
Senior Member
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,638
Original Poster
Rep: 
|
Re: I have the answer (ish)
Quote:
Originally posted by gwiz42
This may be an old subject and I'm late for the party, but I thought I'd chip in incase anyone re-reads the thread.
|
It's never too late  . you see, everybody posting here will --as a rule-- get a mail notification, that there is a new post in this thread, even after a year-long cessation of activity. That includes me, the original poster  . And since I strive to post any answer I find out for myself (never mind how much later) but I didn't do so here -- you provided the answer, my thanks.
Quote:
Originally posted by gwiz42
Active Directory is one way to get what your after (browsing through a proxy) and I've mentioned it below, as it's useful for Linux clients in a Microsoft Domain.
|
You mention Active Directory just here but don't follow it up below. Is it something wich runs on the servers (domain controllers) of my local network and is thus irrelevant for the workstation I'm using (under Win2000 and Knoppix)?
<edit>Oops: "...Active Directory Access". Found it  . </edit>
Quote:
Originally posted by gwiz42
What you really need though is APS (NTLM Authorization Proxy Server) the reason for this is that if your company is using ISA (MS proxy server) you need to send your domain information with every request - NB this is not the same as joining the domain.
|
Aaaaha. Btw, what is NB?
Bookmarked and again: my thanks.
Quote:
Originally posted by gwiz42
...If you want to join the domain ...
|
I do.
Bookmarked as well.
Quote:
Originally posted by gwiz42
...This is possible using SAMBA, OPEN LDAP and KERBEROS. There is a full tutorial at samba.org
Look here for starters I hope this helps
|
It does  . Great.
Last edited by JZL240I-U; 10-05-2005 at 02:55 AM.
|
|
|
10-04-2005, 09:01 AM
|
#14
|
LQ Newbie
Registered: Oct 2005
Posts: 6
Rep:
|
Really glad to help,
It took me a fair while to find it all when I needed it.
The cool thing is that once you get SAMBA to connect to the domain, you can copy the /etc/samba folder (provided it has the secrets.tdb file (some distros this is elsewhere)) to another linux distro (or dual boot) AND THE ACCOUNT IS STILL VALID Yeay! - Though you can't run two at the same time
and NB just means NOTE: (not sure of the origins) it's just my way of adding an important reminder, but separate from the main instructions
@
g
|
|
|
10-04-2005, 09:05 AM
|
#15
|
Senior Member
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,638
Original Poster
Rep: 
|
So now I'll be busy reading, I'll be back if and when I run into problems.
Oh, btw wellcome to LQ (Posts=1 / 2), gwiz42
|
|
|
All times are GMT -5. The time now is 10:58 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|