30
Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin [email protected] Team 2011-09-21

Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin [email protected] Team 2011-09-21

  • Upload
    others

  • View
    11

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Thinking Inside the Box:Embedded Active Directory /

Storage Appliances Based on Samba

Kai Blin

[email protected]

Team

2011-09-21

Page 2: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Outline

IntroductionThe AboutsHardware UsedSoftware Used

ImplementationFront EndBack EndAlternativesToDos

Demo

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (2 / 30)

Page 3: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

The Abouts

I About Myself

I About Samba

I About This Talk

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (3 / 30)

Page 4: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

About Myself

I M.Sc. in computational biology

I Ph.D. student in microbiology

I Open Source developer

I Samba Team member

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (4 / 30)

Page 5: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

About Samba

I Almost 20 years of file serving support

I 2.7 million lines of code

I 20 committers in the last month

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (5 / 30)

Page 6: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

About This Talk

I Proof-of-concept presentation

I No product out there (yet)

I Remaining work: Hooking up features in UI

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (6 / 30)

Page 7: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Hardware Used

I Dockstar

I BeagleBoard XM

I Trim Slice

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (7 / 30)

Page 8: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Dockstar

I 1.2 GHz ARMv5 CPU

I 128 MB RAM

I 4 USB ports

I GbESource:http://archlinuxarm.org/platforms/armv5/seagate-dockstar

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (8 / 30)

Page 9: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

BeagleBoard XM

I 1 GHz ARMv7 CortexA8 CPU

I 512 MB RAM

I 5 USB ports

I 100 MbE

Source:http://www.flickr.com/photos/jadon/4628635196/

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (9 / 30)

Page 10: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

TrimSlice

I 1 GHz ARMv7 CortexA9 dual-core CPU

I 1024 MB RAM

I 4 USB ports

I SATA

I GbESource:http://archlinuxarm.org/platforms/armv7/trimslice

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (10 / 30)

Page 11: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Software Used

I Arch Linux ARM

I Samba 4

I Pylons

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (11 / 30)

Page 12: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Arch Linux ARM

I ARM port of Arch Linux

I Supports ARMv5 – ARMv7 hardware

I Leightweight

I Active community

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (12 / 30)

Page 13: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Samba 4

I Current release: Samba 4 alpha 17

I Some features missing

I AD core support pretty stable

I Provides Python bindings for most libraries

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (13 / 30)

Page 14: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Pylons

I Python WSGI framework

I Modular architecture

I paster based deployment

I Mako template engine

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (14 / 30)

Page 15: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Outline

IntroductionThe AboutsHardware UsedSoftware Used

ImplementationFront EndBack EndAlternativesToDos

Demo

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (15 / 30)

Page 16: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Front End

I Pylons architecture

I SWAT4 architecture

I Features needed

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (16 / 30)

Page 17: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Pylons Architecture

I Layered WSGI (PEP333)applications

I Outer layers providecommon functionality

I Core is own code

Source:https://docs.pylonsproject.org/projects/pylons framework/dev/concepts.html

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (17 / 30)

Page 18: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

SWAT4 Architecture

I MVC design

I Model calls Samba python bindings

I View is AJAX-based

I Controller provides RESTful interface

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (18 / 30)

Page 19: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Features

I User Management

I Group Management

I Share Management

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (19 / 30)

Page 20: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

User Management

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (20 / 30)

Page 21: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Group Management

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (21 / 30)

Page 22: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Share Management

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (22 / 30)

Page 23: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Back End

I Samba 4 python bindings

I Config file generation

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (23 / 30)

Page 24: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Python Bindings

I Generated from IDL

I Provides access to all IDL-based RPC

I Feels very C-like

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (24 / 30)

Page 25: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Config File Generation

I No registry-based configuration in Samba4 yet

I Need to create krb5.conf and BIND config

I S4 does not reload config file for new connections

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (25 / 30)

Page 26: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Alternatives

I Webmin

I S3 SWAT

I Different S4 SWAT implementation

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (26 / 30)

Page 27: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

ToDos

I More AD-related functionality in UI

I Fully automated provisioning

I Share management that works

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (27 / 30)

Page 28: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Outline

IntroductionThe AboutsHardware UsedSoftware Used

ImplementationFront EndBack EndAlternativesToDos

Demo

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (28 / 30)

Page 29: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Demo

DEMO

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (29 / 30)

Page 30: Thinking Inside the Box: Embedded Active Directory ... · Thinking Inside the Box: Embedded Active Directory / Storage Appliances Based on Samba Kai Blin kai@samba.org Team 2011-09-21

Thank you

I Questions?

Kai Blin CC-BY-SA 3.0 Embedded AD appliance w/Samba (30 / 30)