Novell LINUX ENTERPRISE DESKTOP 11, Руководство пользователя

Страница: 82 / 450

Accessing and Manipulating User Data on the Windows Server
Through Nautilus and Konqueror, users are able to access their Windows user data
and can edit, create, and delete files and folders on the Windows server. Users can
access their data without having to enter their password again and again.
Offline Authentication
Users are able to log in and access their local data on the Linux machine even if
they are offline (for example, using a laptop) or the AD server is unavailable for
other reasons.
Windows Password Change
This port of AD support in Linux enforces corporate password policies stored in
Active Directory. The display managers and console support password change
messages and accept your input. You can even use the Linux
passwd
command
to set Windows passwords.
Single-Sign-On through Kerberized Applications
Many applications of both desktops are Kerberos-enabled (kerberized), which
means they can transparently handle authentication for the user without the need
for password reentry at Web servers, proxies, groupware applications, or other lo-
cations.
A brief technical background for most of these features is given in the following section.
5.2 Background Information for Linux
AD Support
Many system components need to interact flawlessly to integrate a Linux client into an
existing Windows Active Directory domain.
Figure 5.1, “Active Directory Authentication
Schema” (page 69) highlights the most prominent ones. The following sections focus
on the underlying processes of the key events in AD server and client interaction.
68 Security Guide