[Spacewalk-list] "net join" during Kickstart

[Brent Clements]

This is fairly easy to do in the authconfig line in kickstart but you need
to make sure your backend is set up correctly.




On Mon, Dec 14, 2009 at 9:55 AM, James Hogarth <james.hogarth at gmail.com>wrote:

> Nothing by default as far as I can recall... but it has been a couple of
> years or so now since I was sysadmin'ing windows servers and doing
> *NIX/windows integration work.
>
> You'll want a user delegated with the ability to join a computer to the
> domain but given that the info for that would end up plain text in your
> script it would be best if that user could do nothing but join to a
> domain....
>
> Have a look at http://support.microsoft.com/kb/324949 to see how to change
> the default location for new users/computers so they can go to an OU by
> default instead of a container. That way a GPO can be applied to them. That
> GPO should be pretty restrictive... limit which user(s) can log in, limit
> net access etc so that if someone gets the 'join domain' user information
> they are very limited in what they can do after having joined the domain....
>
> The computer can then be moved via your usual tools (AD, hyena, etc) to the
> correct OU for that system...
>
> That was the way I used to do it in win2k3R2 days.....
>
>  2009/12/14 Gerd Mueller <gerd.mueller at mikatiming.de>
>
>> that sounds the way to look for. any tip about which gpo to use or how
>>
>> the user should be configured?
>>
>> Thank you
>>
>> Gerd
>>
>>
>> _______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20091214/71f59cc9/attachment.htm>