Machen wir mal wieder ein bißchen Politik...
TELEPOLIS schreibt:
Moderne Demokratien haben seit dem 18. Jahrhundert viel aus einer relativ kurzen Periode des antiken Athen übernommen, die vom Ende des 5. Jahrhunderts bis zum Jahr 322 vor Christus dauerte. Trotzdem gibt es aus dieser Zeit noch viel Interessantes zu entdecken – zum Beispiel die graphe paranomon, die den antiken Athenern eine gewisse Gewähr dafür bot, dass ihre politischen Entscheidungsträger nicht allzu forsch verfassungswidrige Beschlüsse fassten.
Assistant system admin
Apart from teaching Java, I'm also brushing up my admin creds here at AUST, giving the IT guys a helping hand with some teething problems:
- tracking down a notorious problem with Ubuntu when you have your own partition for /var
- firewall config, they use Firehol -- funny, so far I haven't seen two shops using the same firewall toolkit in my life. Incidentally, OpenVPN still doesn't work through the firewall. And currently the satellite uplink blows hard.
- NFS / automounter-fu
and a real novelty for me
On an only semi-entertaining issue, let me quickly list the advantages
of tin roofs: a) lots of noise when rain is playing the drums, b) almost perfect insulation against wireless and cell phone signals.
LDAP authentication for MacOS clients and NFS mounts
A little exercise that might not apply to your problem
- Set TLS_REQCERT to never in /etc/openldap/ldap.conf (unless you know what you're doing - that seems to be the stopper for plaintext passwords)
- Go to Applications -> Utilities -> Directory Utility
- Toggle the lock at the bottom to "unlocked"
- Switch on Advanced mode
- Select Services-tab -> LDAPv3
- Click on pen-symbol at the bottom, then "Show options"
- Add entry for RFC 2307-style server
- Edit /etc/auto_home to contain only the line
* -resvport,bg nfsserver:/path/to/home/&
See 'man mount_nfs' for those two options.
'sudo automount -c' to make the automounter pick up the changed file
Things that should work now:
- id someNetworkUser should print UID/GID from LDAP
- ssh xxx@localhost should use network password and find home directory
- sudo su xxx should work
- dirt -u xxx
- ls /home