- WLUG - wlug.mailman3.com

SAMBA My Documents Redirection and Offile Available with out Roaming Profiles

by Matt Higgins

Here is some back ground before the question: I'm currently running a SAMBA PDC 3.0.10 on FC3. Samba is backed by an LDAP server for account information ldapsam. User accounts were created with smb-ldap tools from IDEALX. I have fixed these scripts up a bit so they also add ldap attributes for OpenExchange. The PDC has a netlogon share with a nice Default Profile for users. Roaming profiles is turned on and all profile data is replicated to the server. All the clients are windows XP Pro. The problem is the profiles are quite large and we don't have the space to support many more users. We also have quite a few remote sites were replicating an entire profile is not practical. I have found that the most important data is in My Documents. Mail is stored on the IMAP server and contact and calendar in OpenExchange. I have read many howtos including nearly the entire Official Samba Howto. All of these documents describe folder redirection with respect to roaming profiles. I have also not found any documents that address the issue of making a redirected folder available off line such as the My Documents folder. I have looked at excluding Folders from the Roaming Profile so only the Personal folder a.k.a My Documents is "roamed" but that looks like a hack. Is it possible to disable roaming profiles and still distribute my nice Default User profile from netlogon? I am fairly sure this is possible just have not tried. Is it possible to disable roaming profiles and then redirect the My Documents folder to a share and make it available off line? This is common behavior for a win2k3 server. Is anyone doing this in production and can give me some pointers or point me to some documentation? Could these settings be made with .pol file or with a bat script running at logon? My I deal scenario is this. User logs in for the 1st time the Default User profile is loaded from the PDC, the My Documents folder is redirected to a share on the server, say there home dir, and that folder is available off line. -Matt

Nov. 27, 2005

Re: [Wlug] Allowing users to start or stop a service

by Mike Leo

Thanks for the feed back...I will continue down the sudo path. --- John Stoffel <john(a)stoffel.org> wrote: > > Mike> We have a set of users who need the power to > Mike> stop/start their own particular > service/daemon. > > Mike> I've tried granting user rights directly to > the init > Mike> script, but that doesn't work. > > Nope, this won't work at all. > > Mike> I am looking into sudo, but am not sure it can > be specific to > Mike> only 1 service, and not all of them? > > sudo will do exactly what you want, but you also > need to be careful > that the user(s) can't run arbitrary program from > with sudo or the > script(s) they are allowed to run. > > For example: > > sudo vi /path/to/file > > is just a gaping security hole, since the user can > now either push to > to a sub-shell from within vi, or edit another file. > Go see the docs > and such on: http://www.courtesan.com/sudo/ and I > really recommend > that you go with this tool. > > John > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 27, 2005

Re: [Wlug] Allowing users to start or stop a service

by John Stoffel

Mike> We have a set of users who need the power to Mike> stop/start their own particular service/daemon. Mike> I've tried granting user rights directly to the init Mike> script, but that doesn't work. Nope, this won't work at all. Mike> I am looking into sudo, but am not sure it can be specific to Mike> only 1 service, and not all of them? sudo will do exactly what you want, but you also need to be careful that the user(s) can't run arbitrary program from with sudo or the script(s) they are allowed to run. For example: sudo vi /path/to/file is just a gaping security hole, since the user can now either push to to a sub-shell from within vi, or edit another file. Go see the docs and such on: http://www.courtesan.com/sudo/ and I really recommend that you go with this tool. John

Nov. 27, 2005

Re: [Wlug] Unknown binary file

by Michael Long

> # rpm -qf /usr/bin/[ > coreutils-5.3.0-10 > > I believe this is the equivalent of the 'test' command that you use as > part of shell scripting. i.e.: > > if [ "$flying_pigs" = "yes" ]; then > echo "I'm dreaming" > fi > Thanks, I will remember the rpm -qf <file_name> from now on.

Nov. 26, 2005

Re: [Wlug] Unknown binary file

by Adam Keck

Hello Mike, My understanding is that it is a hard link to the 'test' binary for use in shell scripts: if [ -f /etc/group ] ; then .... -Adam On Nov 25, 2005, at 10:48 AM, Michael Long wrote: > Hi all, > > As I was looking through my /usr/bin directory I came across a binary > file "[". What is this? I am running Suse 9.3. > > Thanks, > Mike > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Nov. 25, 2005

Re: [Wlug] Unknown binary file

by Brett Russ

On 11/25/05, Michael Long <mlong(a)datalong.com> wrote: > As I was looking through my /usr/bin directory I came across a binary > file "[". What is this? I am running Suse 9.3. # rpm -qf /usr/bin/[ coreutils-5.3.0-10 I believe this is the equivalent of the 'test' command that you use as part of shell scripting. i.e.: if [ "$flying_pigs" = "yes" ]; then echo "I'm dreaming" fi BR

Nov. 25, 2005

Unknown binary file

by Michael Long

Hi all, As I was looking through my /usr/bin directory I came across a binary file "[". What is this? I am running Suse 9.3. Thanks, Mike

Nov. 25, 2005

Re: [Wlug] Allowing users to start or stop a service

by Andrew Mellors

Yeah you can limit a sudoer execution to one script or program. This has the added benefit of being rather extensible, just by modifiying the sudoers file Happy T-day -Andy On 11/24/05, Mike Leo <mleo963(a)yahoo.com> wrote: > > Greetings and happy thanksgiving to all! > > Now, down to business... > > We have a set of users who need the power to > stop/start their own particular service/daemon. > > I've tried granting user rights directly to the init > script, but that doesn't work. > > I am looking into sudo, but am not sure it can be > specific to only 1 service, and not all of them? > > let me know what ya'll think and THANKS! > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > -- -Andy

Nov. 25, 2005

Allowing users to start or stop a service

by Mike Leo

Greetings and happy thanksgiving to all! Now, down to business... We have a set of users who need the power to stop/start their own particular service/daemon. I've tried granting user rights directly to the init script, but that doesn't work. I am looking into sudo, but am not sure it can be specific to only 1 service, and not all of them? let me know what ya'll think and THANKS!

Nov. 25, 2005

OPENING - Sr/Prin Linux Drivers Eng

by John Spencer

Our client in MA (Please no recent college graduates) has a long-term contract opening (6+ months) for a Sr/Prin Linux Drivers engineer as follows: Responsibilities: As a senior/prin. member of the core routing platform group you will be responsible for developing forwarding engine device drivers for next generation enterprise products. Drivers will be developed in C on a Linux platform running on MAC and Layer 1 & 2 chipsets. Required Skills & Experiences: * Strong device driver development experience in C/Linux environments * Solid Ethernet and Layer 2 and Layer 3 protocol experience * Experience with either MAC or other Layer 1 & 2 chipsets highly desired Please send your confidential resume to jspencer(a)optimaleng.com Regards, John John Spencer (978) 256-1113 ext 108 jspencer(a)optimaleng.com OPTIMAL ENGINEERING PARTNERS "Your Optimal partner for real-time, embedded and systems development expertise" www.optimalengineering.com <http://www.optimalengineering.com/>

Nov. 21, 2005