Systems - Home Directory

Home directory is a file system directory on a multi-user operating system containing files for a given user of the system. Thanks to WinRM + AD connector we can manage Home Directories.

Connector supports these operations with Home Directories:

* Create - Create home directory * Search - Search home directory * Update - Update path or permissions of home directory * Delete - Delete home directory

For managing home directories we need these cooperations from customer:

* Running WinRM on AD server - Installed Windows Remote Management on the server with Active Directory * Informations about server - IP, Endpoint, Ports, OS, etc. * HTTPS listener - Provide the Secure Socket configuration to the server to expose an HTTPS connection * CredSSP authentication - CredSSP lets an application delegate the user's credentials from the client to the target server for remote authentication. * User to connect to WinRM - User which will manage HomeDirectories * Port for HTTP 5985 and for HTTPS 5986 * Path and Drive for creating home directory - Path of Home Directory and Drive letter * In AD set attributes homeDirectory and homeDrive - Create new attributes in Active Directory

To manage home directories with IdM, we need to use remote connector server.

At first, we must install connector server on the server where IdM is running. For that we will follow this tutorial

After finishing installation of connector-server we want to test if we can connect to WinRM. For test we will follow this tutorial

After connection test, we must insert scripts to connector server to folder /scripts.

Scripts: https://git.bcvsolutions.eu/modules/winrm-ad-connector/tree/master/scripts/homeDir

Scripts are not avaible for public.

Next, we must configure new system in IdM. Configuration is very similar to configuration of Active Directory. We will follow this tutorial for configuration

First, admin allocate role to user. When allocation is approved, creating account for user in Active Directory will start. After WinRM connector creates account in Active Directory, creating of Home Directory will start.

  • by poulm