Group Policy in Linux

amartlk · 02-09-2012, 12:23 AM

Hi

I want to ask like windows Active directory group policy can we configured group policy for domain user in Centos

i tried the samba as pdc but from here only we make user logon /logout centrally but we cannot manage domain user

Any alternative is there we have client as windows and server as centos

AMAR

acid_kewpie · 02-09-2012, 02:13 AM

There's no real viable alternative to GPO under Linux. There are projects like FreeIPA, but how useful they are now is an issue as I understand it. What are you actually trying to achieve with group policy? There are plenty of tools that can achieve many of the goals of it if you can describe your actual requirements.

amartlk · 02-09-2012, 03:32 AM

i want to restrict user in respect to installation ,running exe ,registry etc

acid_kewpie · 02-09-2012, 03:42 AM

Pretty sure you'll never get that at *any* price. If you want full AD functionality, you need AD.

You *could* explore what you can do with a tool like puppet, which now runs on windows, to apply configuration settings and maintain them over many systems, but I have no idea if these settings you are after are possible to set with the tools available outside of AD.

amartlk · 02-09-2012, 04:50 AM

Thanks

so if i want full functionality of AD i have to set up AD with Windows

AMAR

acid_kewpie · 02-09-2012, 05:01 AM

You have to accept that there is a limit on how much something can be reverse engineered, both in terms of technical feasibility and real world benefit. Sometimes you need to own up to what you need to do. It doesn't seem reasonable to me to think such a huge re-implementation of a highly proprietary product should exist at all, at so you either need to put your hand in your pocket and do it properly, or do something different.