{"id":5935,"date":"2012-03-27T15:46:13","date_gmt":"2012-03-27T12:46:13","guid":{"rendered":"http:\/\/www.fedora.md\/?p=5935"},"modified":"2012-03-28T13:47:46","modified_gmt":"2012-03-28T10:47:46","slug":"ro-autentificare-in-active-directory","status":"publish","type":"post","link":"https:\/\/www.fedora.md\/ro\/2012\/03\/27\/ro-autentificare-in-active-directory\/","title":{"rendered":"Autentificare in Active Directory"},"content":{"rendered":"<p>Sta\u021bia mea de lucru \u00een companie e integrat\u0103 \u00een Active Directory. Este posibil login cu login\/parola din domeniu a oric\u0103rui coleg cu creare automat\u0103 a dosarului de acas\u0103, \u0219i preluare grupe utilizator din domeniu. De\u0219i aceasta posibilitate a fost configurat\u0103 de mult timp (mul\u021bumesc Oleg, autorul <a href=\"http:\/\/www.fedora.md\/wiki\/\u041a\u0430\u043a_\u043f\u043e\u0434\u0440\u0443\u0436\u0438\u0442\u044c_Samba_\u0438_\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440_\u0434\u043e\u043c\u0435\u043d\u0430_Windows_2003\" target=\"_blank\">articolului despre integrare<\/a>), numai recent i-am g\u0103sit utilizare.<\/p>\n<p>Pe Ubuntu a colegului nu mai rula Eclipse cu motorul BIRT - motor de creare rapoarte pe baza setului arbitrar de date. La trecerea \u00een mod previzualizare simplu \"c\u0103dea\". C\u00eeteva \u00eencerc\u0103ri de a g\u0103si capetele problemei au fost nereu\u0219ite, iar lucru trebuie continuat. \u00cemi vine o solu\u021bie: s\u0103 lansez Eclipse la mine pe calculator, iar el s\u0103-l opereze de pe Ubuntu. Se face simplu: <code>ssh -Y username@hostname<\/code>. \u0218i dup\u0103 login orice aplica\u021bie grafic\u0103 va fi pe ecranul t\u0103u, de\u0219i se execut\u0103 pe computerul colegului - mod Trusted X11 Forwarding (vezi man ssh_config).<\/p>\n<p>Dar de aceasta dat\u0103 acest mod nu a lucrat. Ap\u0103rea mesaj de eroare: xauth can't lock .Xauthority file, \u0219i variabila DISPLAY nu era setat\u0103 deloc. \u00cen scurt timp am aflat - SELinux bloca xauth de la crearea fi\u0219ierului .Xauthority. Contextul SELinux pe dosarele \/home\/WORK\/username (WORK - numele domeniului, respectiv username era de tip: WORK\\username) era: home_root_t. Acesta normal se utilizeaz\u0103 numai \u0219i numai pentru \u00eens\u0103\u0219i dosarul \/home \u0219i nu copiii acestuia.<br \/>\nAm schimbat context pe cel corect:<\/p>\n<p><code>chcon --reference \/home\/vasile \/home\/WORK\/*<br \/>\nrestorecon -R -v \/home\/WORK\/*\/.??* \/home\/WORK\/*\/*<\/code><\/p>\n<p>Imediat a \u00eenceput totul s\u0103 lucreze corect. Pare a fi o problem\u0103 \u00een SELinux policy - trebuie de reprodus \u0219i de scris \u00een Bugzilla.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sta\u021bia mea de lucru \u00een companie e integrat\u0103 \u00een Active Directory. Este posibil login cu login\/parola din domeniu a oric\u0103rui coleg cu creare automat\u0103 a dosarului de acas\u0103, \u0219i preluare grupe utilizator din domeniu. De\u0219i aceasta posibilitate a fost configurat\u0103 de mult timp (mul\u021bumesc Oleg, autorul articolului despre integrare), numai recent i-am g\u0103sit utilizare. Pe [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[239],"tags":[231],"_links":{"self":[{"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/posts\/5935"}],"collection":[{"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/comments?post=5935"}],"version-history":[{"count":5,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/posts\/5935\/revisions"}],"predecessor-version":[{"id":5942,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/posts\/5935\/revisions\/5942"}],"wp:attachment":[{"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/media?parent=5935"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/categories?post=5935"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/tags?post=5935"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}