Re: KLF setup

2007-05-10 Thread Matthew Paul Thomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On May 10, 2007, at 3:01 AM, George Farris wrote:
 ...
 Couldn't agree more, however, in the interim if there was some concise
 docs for Feisty it would be great.  Maybe we could get something going
 here to solve the problem until the GUI wizards are in.  Possibly an
 Ubuntu Server docs url on ubuntu.com.  Fill it with some howto
 information covering Samba, LDAP, Kerberos, NFSv4, Active Directory
 Integration.
 ...

If you can write some, that would be great! Please do so at
https://help.ubuntu.com/community/.

Cheers
- --
Matthew Paul Thomas
http://mpt.net.nz/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFGQsSu6PUxNfU6ecoRAnmMAJ9Q5n8hmvDCkbdWfTP4t2aaAfnTNACgo/PC
H9OaE8sca+qW69sX4dgnbWg=
=dvy4
-END PGP SIGNATURE-


-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: KLF setup

2007-05-09 Thread Mike Cornelison

It wouldn't be so bad if there was just one concise piece of documentation but 
alas, we have all manor of stuff out in the wide on the net.  Much of it is not 
correct for Ubuntu or your particular version of Ubuntu. Tools we really need 
but also good docs for each release.


I think this is indicative of Linux, not just Ubuntu. Every distro and every 
release invents some new and improved wheels, and neglects documentation. We 
badly need a standards body to dampen the chaos. LSB?




-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: KLF Setup

2007-05-07 Thread Arwyn Hainsworth
On 08/05/07, Jan Claeys [EMAIL PROTECTED] wrote:
 Op vrijdag 04-05-2007 om 11:01 uur [tijdzone -0400], schreef Johnathan
 Falk:
  One of the biggest things that linux users forget all the time is that
  Microsoft doesn't have a monopoly because of their pretty desktop because if
  desktop beauty was the deciding factor we would all use OS X.  The biggest
  thing is that one a windows server you can have Ldap + Kerberos + File
  Serving setup in under 10 minutes with no hassle. On windows its Hey do you
  want to install Active Directory? Ok I can do that for you type your dns
  domain name and admin password POOF! I'm done.

 And then the result is that Windows-admins don't understand how it
 actually works...?   ;-)

 But you're right that that is one of the things that makes Microsoft 
 Apple popular.  It's also why Ubuntu is rather popular too, even if we
 don't have as many one-click-wizards (or even zero-click-wizards) yet.


I think you just pointed out the crux of the matter. To be more
precise I think what Ubuntu Server is lacking is decent configuration
tools. A few programs provide web-interfaces for configuration, but
most of the time you are forced to edit the configuration files by
hand. Each configuration file has it's own format and is hidden in
it's own secret location. While this is no problem to the advanced
admin it can provide a rather high entrance barrier.

What Ubuntu needs is a centralised administration framework. Something
that can have multiple UIs for different functionality, but with a
single backend. I wrote a spec[1] on this topic a while back, but have
not gotten around to implementing it.

It would also be possible to just write a simple wizard to setup the
system AD style via ssh, but that would not be nearly as elegant.

Some form of remote administration really is a must if Ubuntu, either
as a stand-alone server or as a unified solution) is to be marketed
towards the SMB market and I would very much like his to become a
priority for Canonical/Ubuntu.

Arwyn

[1]https://blueprints.launchpad.net/ubuntu/+spec/remote-administration-server

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: KLF Setup

2007-05-06 Thread Tim Keitt
Message: 3
Date: Fri, 04 May 2007 16:16:29 +0100
From: Andrew Price [EMAIL PROTECTED]
Subject: Re: KLF Setup
To: ubuntu-devel-discuss@lists.ubuntu.com
Message-ID: [EMAIL PROTECTED]
Content-Type: text/plain; charset=ISO-8859-1

On 04/05/07 16:01, Johnathan Falk wrote:
 One of the biggest things that linux users forget all the time is that
 Microsoft doesn't have a monopoly because of their pretty desktop because if
 desktop beauty was the deciding factor we would all use OS X.  The biggest
 thing is that one a windows server you can have Ldap + Kerberos + File
 Serving setup in under 10 minutes with no hassle. On windows its Hey do you
 want to install Active Directory? Ok I can do that for you type your dns
 domain name and admin password POOF! I'm done.

 I have spent the last 8 days trying to get Ldap + Kerberos + NFSv4 to work
 at home with a little 6 node network and I can't even do that, how do you
 expect me or anyone to try and deploy this at a business or a school?  Its
 practically impossible to find a good howto on this, and then feeding ldap
 information with ldif's? What the hell?! Yes I know this is standard but I
 come from a windows world and to paraphrase the Mac people it just works
 I am sick of struggling with this and pretty soon am just going to go back
 to windows work stations.

There's a specification being worked on to provide the features you
mention. It seems to be making good progress:
https://launchpad.net/ubuntu/+spec/network-authentication

[Above clipped from digest]

I realize that network authentication is being actively pursued and
everything leads me to believe it will be done right in Ubuntu. If you
really want to be disruptive (positive or negative depending on your
perspective ;-), dump /etc/passwd (except root) and install ldap on
all systems by default (restricted to localhost unless admin chooses
otherwise). When ldap becomes default infrastructure, it will find
many many uses. Kerberos is nice, but realize that it is only as
secure as the ticket server. Once your ticket server is compromised,
the hacker gains single sign-on too.

THK

-- 
Timothy H. Keitt, University of Texas at Austin
Contact info and schedule at http://www.keittlab.org/tkeitt/
Reprints at http://www.keittlab.org/tkeitt/papers/
ODF attachment? See http://www.openoffice.org/

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


KLF Setup

2007-05-04 Thread Johnathan Falk
One of the biggest things that linux users forget all the time is that
Microsoft doesn't have a monopoly because of their pretty desktop because if
desktop beauty was the deciding factor we would all use OS X.  The biggest
thing is that one a windows server you can have Ldap + Kerberos + File
Serving setup in under 10 minutes with no hassle. On windows its Hey do you
want to install Active Directory? Ok I can do that for you type your dns
domain name and admin password POOF! I'm done.

I have spent the last 8 days trying to get Ldap + Kerberos + NFSv4 to work
at home with a little 6 node network and I can't even do that, how do you
expect me or anyone to try and deploy this at a business or a school?  Its
practically impossible to find a good howto on this, and then feeding ldap
information with ldif's? What the hell?! Yes I know this is standard but I
come from a windows world and to paraphrase the Mac people it just works
I am sick of struggling with this and pretty soon am just going to go back
to windows work stations.

Maybe in the next iteration of Ubuntu instead of just 1. DNS server and 2.
LAMP server, they could have another option Directory Server. Server roles
are a big reason people like windows.  I just click a server role and BAM!
Everything is done for me, and in the end Ubuntu's goals are to make linux
easy.

Johnathan Falk
Network Admin
Clinton Community Schools

MCP, MCSA, A+, Network+, CCNA


Johnathan Falk
Network Administrator
Clinton Community Schools


-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: KLF Setup

2007-05-04 Thread George Farris
On Fri, 2007-04-05 at 11:01 -0400, Johnathan Falk wrote:
 One of the biggest things that linux users forget all the time is that
 Microsoft doesn't have a monopoly because of their pretty desktop because if
 desktop beauty was the deciding factor we would all use OS X.  The biggest
 thing is that one a windows server you can have Ldap + Kerberos + File
 Serving setup in under 10 minutes with no hassle. On windows its Hey do you
 want to install Active Directory? Ok I can do that for you type your dns
 domain name and admin password POOF! I'm done.
 
 I have spent the last 8 days trying to get Ldap + Kerberos + NFSv4 to work
 at home with a little 6 node network and I can't even do that, how do you
 expect me or anyone to try and deploy this at a business or a school?  Its
 practically impossible to find a good howto on this, and then feeding ldap
 information with ldif's? What the hell?! Yes I know this is standard but I
 come from a windows world and to paraphrase the Mac people it just works
 I am sick of struggling with this and pretty soon am just going to go back
 to windows work stations.
 
 Maybe in the next iteration of Ubuntu instead of just 1. DNS server and 2.
 LAMP server, they could have another option Directory Server. Server roles
 are a big reason people like windows.  I just click a server role and BAM!
 Everything is done for me, and in the end Ubuntu's goals are to make linux
 easy.

You couldn't be more right about this.  I've been through this myself
and though I did manage to set up samba and ldap there are so many
howto's and other pieces of information that contradict one another it,
is just plain ugly and that's being kind.  Clear concise and TESTED
instructions on the Ubuntu site would be a real help.

Even a setup script would be a better first step, something like:

would you like to set up

[ ] ldap
[ ] samba
[ ] nfsv4
[ ] kerberos

Do you need to connect to ADS as a workstation
[ ] yes
[ ] no

Do you need to be a member server in an ADS tree
[ ] yes
[ ] no


Even that would be better than what happens now
If I had experience with Kerberos and an ADS machine to play with I
might do this but I just don't have the resources.



-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: KLF Setup

2007-05-04 Thread Andrew Price
On 04/05/07 16:01, Johnathan Falk wrote:
 One of the biggest things that linux users forget all the time is that
 Microsoft doesn't have a monopoly because of their pretty desktop because if
 desktop beauty was the deciding factor we would all use OS X.  The biggest
 thing is that one a windows server you can have Ldap + Kerberos + File
 Serving setup in under 10 minutes with no hassle. On windows its Hey do you
 want to install Active Directory? Ok I can do that for you type your dns
 domain name and admin password POOF! I'm done.
 
 I have spent the last 8 days trying to get Ldap + Kerberos + NFSv4 to work
 at home with a little 6 node network and I can't even do that, how do you
 expect me or anyone to try and deploy this at a business or a school?  Its
 practically impossible to find a good howto on this, and then feeding ldap
 information with ldif's? What the hell?! Yes I know this is standard but I
 come from a windows world and to paraphrase the Mac people it just works
 I am sick of struggling with this and pretty soon am just going to go back
 to windows work stations.

There's a specification being worked on to provide the features you
mention. It seems to be making good progress:
https://launchpad.net/ubuntu/+spec/network-authentication

Feel free to find out if there are any contributions you can make
towards this goal.

--
Andy Price


-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: KLF Setup

2007-05-04 Thread George Farris
On Fri, 2007-04-05 at 16:16 +0100, Andrew Price wrote:

 There's a specification being worked on to provide the features you
 mention. It seems to be making good progress:
 https://launchpad.net/ubuntu/+spec/network-authentication
 
 Feel free to find out if there are any contributions you can make
 towards this goal.

Yes I am aware of that and well done, however, that spec has been worked
on ever since Breezy or Hoary,  I got the feeling nothing was happening.
I'm not complaining so much per say just that this is a big issue and
has been mentioned here on the lists for the last couple years.

I guess what I'm saying is I think this is an important enough issue
that maybe Mark might think about pumping some resources into it for a
month or so.

Cheers



-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss