Discussion:
[Wine] can wine detect win AD logon scripts
iinfi
2009-02-08 08:30:04 UTC
Permalink
i m looking at windows workstation users switching to linux workstations
all of them are authenticated by windows AD domain controller. the windows AD has some logon scripts which do not run on linux
some the scripts are as below to map shared drives on the file server
NET USE G: \\172.16.2.2\FINANCE

NET USE G: \\172.16.2.2\AUDIT

linux by default doesnt recognise these scripts. can Wine help me here??
vitamin
2009-02-08 17:30:33 UTC
Permalink
Post by iinfi
i m looking at windows workstation users switching to linux workstations
all of them are authenticated by windows AD domain controller.
No, Wine does not support windows netowrking in any way shape or form. You'll have to use Samba for that.
iinfi
2009-02-08 17:49:51 UTC
Permalink
samba doesnt detect the AD logon scripts either ....

hence i was looking for an alternative.

thanks... do you know any workaround where AD logon scripts like

net use d: \\192.168.5.1\share

can be detected at logon on linux workstations authenticating from windows AD

we are looking to migrate 200 odd windows workstation users to linux n hence using using fstab and automount using pam_mount is not feasible as this would mean locking users to their own workstations and everytime a user needs something additional .. the sysadmin will v to change the fstab file on the client machine.

thanks for your time
James McKenzie
2009-02-09 00:38:07 UTC
Permalink
Post by iinfi
samba doesnt detect the AD logon scripts either ....
hence i was looking for an alternative.
thanks... do you know any workaround where AD logon scripts like
net use d: \\192.168.5.1\share
can be detected at logon on linux workstations authenticating from windows AD
we are looking to migrate 200 odd windows workstation users to linux n hence using using fstab and automount using pam_mount is not feasible as this would mean locking users to their own workstations and everytime a user needs something additional .. the sysadmin will v to change the fstab file on the client machine.
And the last is a problem? That is called SECURITY and you should be
enforcing it, not allowing your users to install whatever they feel they
need.

James McKenzie
iinfi
2009-02-09 01:37:16 UTC
Permalink
sorry u misunderstood me.

incase of windows ad, incase of any change in user/group requirements akk the sysadmin needs to do is to make a change to group /user policies at the AD server.

here you will need to change/edit the file at the user end.
James McKenzie
2009-02-09 01:48:11 UTC
Permalink
Post by iinfi
sorry u misunderstood me.
I did not misunderstand you, I did not have all of the facts on what you
were trying to do.
Post by iinfi
incase of windows ad, incase of any change in user/group requirements ask the sysadmin needs to do is to make a change to group /user policies at the AD server.
Good security practice, but do you have a policy in effect on how
configuration changes are made and recorded? Otherwise, this could
become a security risk and a lot of effort.
Post by iinfi
here you will need to change/edit the file at the user end.
This is not good. However, Wine does not work with Active Directory at
this point. I would like to see the bridge implemented, but this is a
great deal of effort and maybe outside the scope of this project.
Others would have to make that judgement call. All I do is work with
the Wine code and Macs.

James McKenzie
Austin English
2009-02-09 01:49:07 UTC
Permalink
Post by iinfi
sorry u misunderstood me.
incase of windows ad, incase of any change in user/group requirements akk the sysadmin needs to do is to make a change to group /user policies at the AD server.
here you will need to change/edit the file at the user end.
Would nfs be feasible?
--
-Austin
vitamin
2009-02-09 05:41:28 UTC
Permalink
Post by Austin English
Would nfs be feasible?
How's it any different then cifs? Mount is a mount regardless of what FS it is.

OP, the only thing I'd recommend write a script for user to grab the logon script from AD, parse it and add appropriate mounts. Shouldn't be too hard to do. And you don't have to add anything into fstab.
iinfi
2009-02-09 15:37:33 UTC
Permalink
thank you.

i m not good at scripting. i will chk how i can pull the scripts from AD and parse them.
iinfi
2009-02-14 14:46:52 UTC
Permalink
@vitamin

do you know where the AD scripts will be stored in linux box when the user logs in?
if know this.
then i sud be able to parse it to make the AD scripts work
vitamin
2009-02-14 17:58:03 UTC
Permalink
Post by iinfi
@vitamin
do you know where the AD scripts will be stored in linux box when the user logs in?
They are not on Linux box. You need to look under NETLOGON share on DC.
Loading...