How to single sign on for Linux RedHat server from windows desktop - authentication

We are hosting our portal pages on a linux box. I am supposed to implement a single sign on where the user logs into his/her windows xp desktop and that login is consumed by the portal and used to set the user role appropriately. I really would like some answers on how this can work best.
Environment:
Jboss 4.2.2GA
Jboss portal 2.6.5
Redhat Enterprise Linux 5

There is absolutely no way of doing this right.

Related

How to authenticate windows client with Ldap server on Linux with share home directory

I want to configure LDAP server on Linux (centos is most preferable) and I want to authenticate from my windows client to that LDAP server (on Linux) and also I want that home folder of the windows user must be stored on LDAP server (on Linux).
So how can I achieve this setup? is it possible?
You will need more than an LDAP server, as Windows clients are relying on more services than just LDAP.
Look at Samba Servers on Linux.

Hyper-V Server Core Guest OS Install

I am new to Hyper-V and Server Core but I am stumped as to how to install a guest OS from an ISO using only PowerShell.
I have downloaded the Hyper-V Server ISO and installed it on my server. It only installs Server Core and does not give me the option for a full GUI option. I configured its network settings, etc and all looks ok. So Server Core installed properly and Hyper-V feature is enabled. I can use PowerShell to create a VM with VHDX and link my Guest OS ISO to it. When I start the VM there is no console UI to install the OS.
How are you supposed to install a guest OS with no console interface to setup the OS?
Note, there is no option under this configuration to enable the OS GUI as some posts have suggested.
First, please don't confuse "Server Core" with "Hyper-V Server". "Server Core" is an installation mode of Windows. Among other things, it can be converted to GUI mode, which is why people keep telling you to just turn the GUI on. Hyper-V Server looks like Server Core but it is not Server Core.
For your actual problem, you're not going to find a simple out-of-the-box solution. You could work up a complete unattended installation process. You could set up a Windows Deployment Services server and have it install via PXE boot. I think some of the third-party Hyper-V management solutions allow you to connect to the console of a VM from within the local Hyper-V Server.
Hyper-V Server was designed with headless operation in mind. It was expected that you would use it to configure and perform maintenance on the management operating system and, if desired, the virtual machines as containers. The guest operating systems themselves were not really meant to be managed from within Hyper-V Server. What it's expected that you'll do is use a full GUI, whether another copy of Windows Server or a Windows desktop operating system running Remote Server Administration Tools to remotely connect to Hyper-V Server and manage its VMs.

DirectAccess 2012 R2 connection failing for Win8 with certificates

We're working on an implementation of DirectAccess using Windows Server 2012 R2.
The DA server is a single NIC behind the firewall with TCP/443 forwarded for IPHTTPS.
During the initial testing/setup, we set it up strictly for Windows 8.1 clients, using the username/password (computer account) to authenticate. Everything worked beautifully.
Wanting to extend the testing to Windows 7 clients, we configured DA to use certificates for authentication. We have an internal PKI infrastructure that has worked properly for everything else we've needed it for during the last 2 years.
Windows 7 clients, with the DirectAccess Connectivity Assistant, connect and work beautifully. However, Windows 8.1 clients cannot.
We've checked the certificates and all seems good. Using the DirectAccess Troubleshooter, we see that it connects successfully to the DA IPHTTPS URL, however it can't access any internal resources. We can ping the internal DCE addresses x:y:z::1 & x:y:z::2 that it is my understanding are the DA server inside our network.
Are there any additional tools for troubleshooting this? Can anyone point me in the right direction to determine why only Win8 clients won't connect with certificates?
The initial getting started wizard in DA allows Windows 8 / 8.1 to connect using Kerberos Proxy (no certs). A full blown install using PKI mandates that all clients use certificates. Deploy the Computer certs to the Windows 8 / 8.1 and you will be fine.
Reference - http://technet.microsoft.com/en-gb/windows/dn197886.aspx
How does DirectAccess in Windows 8 and Windows Server 2012 simplify deployment?
In earlier versions of Windows Server, a PKI was required to deploy DirectAccess. DirectAccess used the PKI for server and client certificate-based authentication. Now Windows 8 sends client authentication requests by using a Kerberos proxy service running on the DirectAccess server. The Kerberos proxy service sends requests to domain controllers on behalf of the client. As a result, for simple deployments a PKI is not required to deploy DirectAccess, and IT administrator can use the Getting Started Wizard to configure DirectAccess in a few easy steps. For more complex deployment scenarios, PKI is still required.
It would help if you can present some graphical representations of your problems 'cause every response to your question would only be assumptions.
Troubleshoot as follows:
Check to make sure the windows client is an Enterprise edition
If point 1 above is true, run the 'get-DaConnectionstatus' command on Powershell to see if the client can determine its location, otherwise get a windows enterprise edition.
3.If both point 1 and 2 are true then check to make sure your group policies are well configured. Remember to separate the security groups for windows 7 and windows 8 clients.

how to restart a subsystem in alfresco 4 community?

i'm working in installing and configuring Alfresco community edition 4 (alfresco-community-4.0.d-installer-linux-x64.bin) on a 64bit ubuntu server (10.04.4 LTS). I'm trying to authenticate and syncronize users and group with out OpenLDAP server but as long as we make changes to
$TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties
i have to restart tomcat or the whole server.
Is there a way to restart only a single subsytem in alfresco community edition?
Thanks
Unfortunately, not. The reason is that JMX, which allows you to restart subsystems without a restart, is only available in Enterprise Edition.

Problem add site to IIS6

I have installed IIS6 in my pc that have the OS in XP.
I have installed
- IIS6 Manager,
- IIS6 Resource Kit Tools
I can open:
Start>Control Panel>Administrative Tools>Internet Information Services (IIS6) Manager ,
But I cant add new site in IIS, I can't see the wwwroots site.
In the right click in Internet Information Services I can do only connect to one other pc.
Any ideas???
Thnax.
I have installed IIS6 in my pc that have the OS in XP.
I doubt it. IIS6 is part of Windows Server 2003. It doesn't run on vanilla XP, which uses IIS5.1.
I have installed - IIS6 Manager, - IIS6 Resource Kit Tools
That's not IIS6, that's only an interface to configure IIS6 installations on this or other machines. It is of no use to you. If you want to install IIS on an XP machine, as previously mentioned in your other question, you must have a copy of the XP Pro install CD.
But I cant add new site in IIS
You won't be able to add a new site even in a working IIS on XP. As XP is not a server OS, you will be limited to running a single web site, the ‘Default Web Site’ IIS comes configured with.
(There are script hacks you can run to add more sites if you must, but you can only actually serve one site at once.)
The Resource Kit Tools only include the manager that allows you to connect to OTHER computers running IIS. You will need to install IIS directly on the machine (it needs to be XP Pro as well - not home edition). See this link - it is fairly straighforward add/remove windows components.
http://www.learnthat.com/courses/computer/windowsxp/iis/