Chapter 13. Commands on the ThinLinc Server
tl-limit-printers
This command is run by VSM Server at session startup and reconnect if the Printer Access Control
feature of ThinLinc is activated. See Section 5.5 for details.
tl-mount-cifs
This command is used to mount CIFS/SMB network file systems at login-time. See Section 10.1 for
documentation on this subject.
tl-memberof-group groupname
This command can be used to determine if the current user is a member of the specified group. It
returns true (0) if the user is a member, false (1) if the user is not a member and false (2) if the
specified group does not exist.
tl-nds-memberof-container LDAP container
This command can be used to determine if a user is member of a specific LDAP/eDirectory
container, in eDirectory known as ou. It returns true (0) if the LDAP object corresponding to the
current user resides under the container specified as parameter and false(1) if not.
This command connects to the LDAP/eDirectory server using the parameters specified in
/etc/ldap.conf.
tl-passwd
This command is used to let the user change their password, both in the underlying authentication
mechanism and in the ThinLinc Single Sign-On mechanism.
In order for this to work, any user must be able to read the file /etc/pam.d/sshd (or, more
correct, the file that the symbolic link /etc/pam.d/thinlinc points at.
Also, in the case where the underlying authentication mechanism is LDAP or eDirectory, make sure
that the parameter pam_password in /etc/ldap.conf is set to a value that is appropriate for your
environment. If you’re authenticating against eDirectory servers, it must be set to nds. See the
comments in ldap.conf for more information.
138
Kommentare zu diesen Handbüchern