Red Hat LINUX VIRTUAL SERVER 4.6 - ADMINISTRATION Guida di Installazione Scaricare il pdf (Pagina 16)

1. Open AD user properties for that user account.

2. Select the Unix Account tab.

3. Check Unix-enabled.

4. Set the Primary GID Number to the group ID of an actual domain user group.

Note that these instructions are equivalent for setting up domain users for logon using the console,

RDP, SSH or any other remoting protocol.

4.6.2.2 Configure Quest on Linux VDA

4.6.2.3 Workaround SELinux Policy Enforcement

The default RHEL environment has SELinux fully enforced. This interferes with the Unix domain

sockets IPC mechanisms used by Quest and prevents domain users from logging on.

There are a few ways to workaround this as outlined at:

https://support.software.dell.com/authentication-services/kb/70022.

The easiest method is to disable SELinux:

As root, edit /etc/selinux/config and change the SELinux setting:

SELINUX=disabled

This change requires a reboot:

reboot

Note: Take care with this setting. Re-enabling SELinux policy enforcement after disabling can cause

a complete lockout, even for the root user and other local users.

4.6.2.3.1 Configure Auto Ticket Renewal

Auto-renewal of Kerberos tickets needs to be enabled:

sudo /opt/quest/bin/vastool configure vas vasd \

auto-ticket-renew-interval 32400

This sets the renewal interval to 9 hours (32400 seconds) which is an hour less than the default 10

hour ticket lifetime. This value will need to be set to a lower value on systems with a shorter ticket

lifetime.

4.6.2.3.2 Configure PAM and NSS

Quest requires that PAM and NSS be manually configured to enable domain user login via HDX and

other services such as su, ssh, and RDP. To configure PAM and NSS:

sudo /opt/quest/bin/vastool configure pam

sudo /opt/quest/bin/vastool configure nss

4.6.2.3.3 Join Windows Domain

Join the Linux machine to the AD domain using the Quest vastool command:

sudo /opt/quest/bin/vastool -u user join domain-name

The user is any domain user with permissions to join machines to the Windows domain. The

domain-name is the DNS name of the domain; for example, example.com.

1 2 ... 11 12 13 14 15 16 17 18 19 20 21 ... 26 27

Nessun commento

Red Hat LINUX VIRTUAL SERVER 4.6 - ADMINISTRATION Guida di Installazione Pagina 16