[K12OSN] NEW HOWTO - Setup a Simple Application Server - PART V

[Immanuel Derks]

On Fri, 2004-08-06 at 16:35, Petre Scheie wrote:
> Much more graceful than my script!  I had a hunch there was a better way 
> to do it.
> 

:)
For real cool admin stuff, collect all your users in a LDAP db server
(we populated 1100 users in de dbase with al little AWK scripting)
Give them with apg generated passwords and let all servers authenticate
to that LDAP server.

Next use pam_mkhomedir module and the aforementioned auto ssh
keygeneration trick in the x init.d  map and your users will
automatically be setup with there first login.

Something we're still busy with is good skel dir structures, fixed
mozilla and openoffice environments. 

Any good worked out suggestions here?

Kind regards,
Immanuel
> Petre
> 
> Immanuel Derks wrote:
> 
> >On Thu, 2004-08-05 at 17:55, Gavin Spurgeon wrote:
> >  
> >
> >>Hi List...
> >>  
> >> I have done Part V, Part V goes through howto make desktop
> >> launchers to the apps on your new Appserver..
> >> go have a quick look @ http://www.leighctc.kent.sch.uk/gsp/
> >> Click on the Application Server HOWTO
> >>  
> >>    
> >>
> >
> >Nicely done. We did the same kind of seperation of X & Apps but make the
> >scripting a little different:
> >
> >-There is no need for expect or tcl, juist
> >
> >ssh-keygen -t rsa -f ~/.ssh/id_rsa -C '' -N ''
> >
> >will generate keys without the need for user intervention.
> >Likewise will 
> >
> >ssh-keyscan -t rsa "appserver_ip,xserver_ip " > ~/.ssh/known_hosts
> >
> >obsolete the need for user intervention while handshaking with the
> >server.
> >
> >We put this as a little script in de /etc/X11/xinit/xinitrc.d/ dir so
> >the keys are generated on the fly while users login through GDM/KDM.
> >The old keys are throw away while logging out with the purge_user
> >script. (added for a little more security).
> >
> >The appserver needs it's home dirs to be mounted on the X_server because
> >apps like mozilla and openoffice generate a lot of userdependant data,
> >also does it make for consistent file browsing to be on "1" server.
> >
> >Kind regards,
> >Immanuel Derks 
> >
> >
> >_______________________________________________
> >K12OSN mailing list
> >K12OSN at redhat.com
> >https://www.redhat.com/mailman/listinfo/k12osn
> >For more info see <http://www.k12os.org>
> >
> >  
> >
> 
> 
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
-- 

 T R A N S L U C E N T  S Y S T E M S
 -The Linux Engineers From Amsterdam-

   Tel:   +31 [0]20 6127702
   Fax:   +31 [0]20 7798469
   EMail: info at translucent.nl