Hi Mike thanks for the helpful reply... Got this set up on a Kubuntu proxmox kvm vm on our corp network w/centrify to ADjoin and x2go and indeed it works very nicely and AD users can login without even specifying the domain name.. which is kind of nice. Very pleased with the quality and speed of x2go.. seems comparable to NX, much easier setup and sound (haven't tested printer)... works out of the box... yeah it's nice to have the AD groups on the ADclient... we have a group called unixadmins so a simple %unixadmins addition to the sudoers file allows an AD user in that group to sudo su -l to root with their AD pw on the box...
Cheers, Jon
On Wed, Jan 25, 2012 at 2:36 AM, Mike Gabriel < mike.gabriel@das-netzwerkteam.de> wrote:
Hi Jonathan,
On Di 24 Jan 2012 18:07:29 CET Jonathan Brown wrote:
Hello,
I have been researching various options and it seems that x2go is preferable as it is based on nx and is actively developed. I want to try it out, however just had a quick question on AD integration. I understand there is this ldap option for the client, however, what about just joining the host server to a domain using likewise or centrify, and then once confirmed that users can log in via console and ssh with AD, can we not use the x2go client to log in as AD user? Also would their be a designation such as DOMAIN\ADusername ?
Thanks!
Once you can log in to a Linux-AD-Client via SSH you can start using X2Go right away.
Users that shall be allowed to use client-side folder sharing have to be in the ,,fuse'' group on the Linux machine. This fuse group normally is a local group (/etc/passwd), but it surely is possible to place that group into AD.
I found it quite helpful to have the UNIX extensions activated in AD. So that special posix attributes like uidNumber and gidNumber get stored in LDAP and are recognized by the Linux-AD-Client. This allows you to have multiple Linux boxes on site that have the same user account base (usernames, uidNumbers, gidNumbers, all matching... which is not the case if you use standalone winbind/AD client implementations).
Greets, Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B mail: mike.gabriel@das-netzwerkteam.**de<mike.gabriel@das-netzwerkteam.de>, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.**de/freebusy/m.gabriel%40das-** netzwerkteam.de.xfb<https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb>
X2go-User mailing list X2go-User@lists.berlios.de https://lists.berlios.de/mailman/listinfo/x2go-user
-- *"It is only when each individual has achieved inner peace that we will see lasting outer peace in the world" *