PIG: Practical Interoperability Guides This site contains documents that might help you with your interoperability issues. In a modern network you will often find Windows, GNU/Linux and Mac OS X machines and sometimes some other legacy operating systems. On this site I collect the documents I have written on supporting these mixed environments. Note that I am a big fan of Free and Open Source Software and thus all solutions provided here are written from that point of view, and try to solve most of the issues with open source products. For comments and suggestions use: dleeuw at made-it dot com.

Introduction

• Authentication, Authorization and Accounting
• UID, GID, SID and RID
• Tools to help in the implementation described below can be found at: DAS Project
• Some PAM notes and ideas
• Windows notes
  • How Windows boots and how you should do your testing

Core services

• NTP server setup
  External link: NTP sitemap
• Extending DNS with DNS-SD
• Setting up DNS to support Windows clients and Active Directory
• Dynamic DNS setup
• Creating a CA using OpenSSL

Explanation on how to create a CA with openssl as implemented in the cao tool.

Sharing files

• File Access Rights
  • GNU/Linux file access and ACL permissions
  • Windows file access and ACL permissions
• Using SSH
  • Using SSHFS
  • Using WinSCP
• Using NFS
  • NFS
• Using SMB through SAMBA
  • Samba Protocols
  • Samba: file access and ACLs
  • Samba Trivial Database (tdb) Files
• Finding malware
  • ClamAV

Using OpenLDAP to store information

• OpenLDAP setup

  • Schemas
  • ACLs
  • DIT
  • Making GNU/Linux use LDAP
  • Make sudo use LDAP
  • Joining SAMBA and LDAP
    • Samba LDAP Accounts
    • Making the PDC
    • Making the BDC
    • Making a Member Server
  • Make Mac OS X use LDAP

Using Kerberos to store passwords

• Kerberos setup

  • DNS setup for use with Kerberos
  • Kerberos DB Setup
  • Kerberos Policies
  • Adding principals
  • Using the Kerberos password store through PAM
  • Getting user tickets on a workstation
  • kadmind
  • Kerberos Integration (SSO)
  • Kerberos Etypes

• Active Directory and Open Source

  • Creating Active Directory users with OpenLDAP tools
  • Active Directory installation notes
  • Using MIT Kerberos as a single password store
  • Make AD trust MIT Kerberos
  • Used resources

• Running SAMBA 3 with OpenLDAP and MIT Kerberos

  • Samba Setup
  • This is the old documentation: Kerberized SAMBA. The above are 2 parts that are split off. More might follow.

Office integration (working together)

• Connecting Mozilla Thunderbird to Microsoft Office365 for e-mail and calendering
• Printing with CUPS from Windows, Mac OS X and GNU/Linux

Server and Client management

• Managing Windows the OpenSource way: OPSI (external website)

Mobile communication and privacy

• Setting up your own cloud (NextCloud)
• Making it your phone

GNU/Linux security

• Security: a layered design

• Intrusion Prevention

  • PAM security options
  • hosts access
  • firewalling
  • Automatically ban an IP on multiple hosts

• Intrusion Detection

  • rkhunter

• Encryption

GNU/Linux Storage

• Working with files
• Block devices
• iSCSI
• The Device Mapper
• A file device
• Software RAID
• Multipath
• Logical Volume Manager
• Virtual File System
• Quota
• Remainder of the old stuff: Filesystem Guide