Project

General

Profile

Actions

action #46718

open

Create a setup-script for invis-sub-server

Added by flacco over 5 years ago. Updated about 3 years ago.

Status:
In Progress
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Start date:
2019-01-26
Due date:
% Done:

30%

Estimated time:

Description

Major steps to realize with this Script:

  1. Establish an openVPN connection to the main invis-server
  2. Join the Domain as a "Read Only Domain Controller" (RODC)
  3. Setup sssd
  4. Setup local samba shares
  5. realize (owncloud based) data synchronization between sub and main-server

Some of these steps are already realized inside the joininvis-script from the invisAD-client package.

Joining the domain as a rodc (https://de.wikipedia.org/wiki/Read_Only_Domain_Controller) instead of a simple member server seems to be the better way. In a productive environment at one of our custumers I tried to realize a subsidiary server as a simple member-server. Nearly every time the vpn-connection caused by a not very stable internet-connection, I had to rejoin the domain with the sub-server to give the sub-users access to their local samba-shares.


Related issues 1 (1 open0 closed)

Related to invis-sub-setup - action #38303: Create a rpm package with basic directories, config files and dependenciesIn Progressflacco2018-07-07

Actions
Actions

Also available in: Atom PDF