Transition from Windows-based network to Linux-bas
I am looking to make the switch from a Windows based network to a Linux (preferably Ubuntu, because I used it the most) based one. Currently the network includes a Windows 2003 server which acts as a domain controller and file server, a network shared printer (Canon 2300N) and 7 clients running Windows. Several other Windows-based clients connect remotely via RDP.
I would like to setup a server to act as a domain controller, file server, and (if possible) terminal server. The clients should be authenticated via the server and have access to the files stored on it (via ssh?).
Here are several points that I was wondering about:
[li]All the clients use Outlook, some of the clients run Quickbooks Pro and another program called Tentant File Pro. I was thinking about replacing Outlook with Thunderbird (I contact, calendar, and tasks) and I know that Wine can't run Quickbooks and Tenant File Pro so I may have to use VirtualBox/VMWare because these applications can't be replaced by native Linux versions.[/li]
[li]I need an adequate backup solution for the files on the server running as a daily backup.[/li]
[li]Should I use webmin to administer the server?[/li]
[li]What antivirus / firewall solution should I use for the server and the clients?[/li]
[li]How can I allow remote clients the login to the server to be able to run applications (Outlook, Browser, Tenant File Pro, etc.) remotely on the server?[/li]
What is the best solution for this? And what would be the least painful way of making the transition for the users?
I know this is a lot, but any feedback would be appreciated.
Thanks.
Comments
-
You can use openldap to setup a domain controller and setup the windows and linux based hosts to authenticate against the openldap server.
For e-mail, contact and calendar management there are several solutions, but most involve setting up separate server software, the simplest and probably most cost effective approach would be to look into google apps for business (http://www.google.com/apps/intl/en/business/index.html) which can develop those solutions to any platform including document editing and collaboration tools. The benefit of google apps for business is that it is paid per user per month, the long term savings can easily outweigh the cost of servers and all related software for all clients.
For file sharing you can setup sftp, samba or nfs shares based upon your needs. I think that using filezilla as a sftp client would be the easiest solution, the only drawback is that would require a little training.
For a backup utility you can implement shell script that are launched by cron at set intervals to write the backup to external disk with or without compression.
You can use webmin to administer the server, but to obtain better control and more knowledge of the internal functions I recommend using ssh and doing all administration from the command line.
There are several antivirus products such as avg, antivir or clamav that can run on the server and clients. I have always recommended antivir for both server and client installations.
Currently the rdesktop application does not support rdp5 or 6, so terminal server capabilities for single applications can be difficult. I recommend checking out vnc server capabilities or citrix xen solutions (http://www.citrix.com/English/ps2/products/feature.asp?contentID=2300358) because they support multiple operating systems, both of these solutions would allow you to have a single windows based computer on the network to serve these applications to hosts on all operating systems.
These solutions may start out as a little costly, but the multi-OS support and cloud based functionality will put you in a good position for future enhancements.
The use of citrix xen and google docs will be the simplest to train the users on because xen is invisible and google docs are simple web based solutions, the only real difficulty would be to train the users to interact with a sftp client.0 -
You can use openldap to setup a domain controller and setup the windows and linux based hosts to authenticate against the openldap server.
That sounds good, I think I'll try that.For file sharing you can setup sftp, samba or nfs shares based upon your needs. I think that using filezilla as a sftp client would be the easiest solution, the only drawback is that would require a little training.
I was thinking of using SSH and running SSHFS so the users can access their files on the server, would this be OK?For a backup utility you can implement shell script that are launched by cron at set intervals to write the backup to external disk with or without compression.
I saw a post that recommends running a cron job that executes rysnc for the backups, would that be OK?Currently the rdesktop application does not support rdp5 or 6, so terminal server capabilities for single applications can be difficult. I recommend checking out vnc server capabilities or citrix xen solutions (www.citrix.com/English/ps2/products/feat...sp?contentID=2300358) because they support multiple operating systems, both of these solutions would allow you to have a single windows based computer on the network to serve these applications to hosts on all operating systems.
I was planning on having the users login remotely via SSH into a virtualized instance to run certain applications on the server but it seems (from the responses I'm getting) that it is too much of a security risk so I'll setup the applications to run locally on the client's desktops and access the server data via SSH.0 -
sshfs should be sufficient as long as all clients have the necessary software to access the shared data.
You can use rsync, cp, scp, or write to a disk.. the key is to find the best backup method for your needs. rsync if the best solution for a rolling backup, but for incremental backup it would probably be best to focus on tar.gz archives being created on a remote system or being burned to a backup media.
x11 app forwarding can be done through ssh, but you cannot forward the gui from windows based applications via ssh. Using local virtual machines would fulfill their needs, but it can become costly and can be abused by the users, which is why I recommend virtual terminal sessions. The price of a single instance of an OS and software along with a virtual terminal solution can be quite a bit cheaper and more secure.0 -
What about Exchange and your current Outlook clients ? Are they using "basic" email features: sending/receiving emails and few more, or are they using "enhanced" features ( shared calendars, agendas, multiple email folder, public folders) and so on ?
I'm absolutely a supporter of Linux platforms but there's so much to do to have a real working environment if you want to replace a Windows Server system on certain enterprise companies.
My biggest troubles in this moment are related to Microsoft legacy technologies, basically:
- Client policies (set by the AD domain controller), I don't mean basic tasks but things like locking down a Windows client system (no local admin rules but fully working on certain things)
- FSMO roles
- Exchange when you use advanced (legacy) groupware features
- AD software distribution
and so on.
I'm really trying to push things like Samba 4, OpenLDAP, 389 directory server and things like that to the maximum but it's really hard to keep all the benefits of a legacy MS environment. (@Matt: maybe a new blog argument ?)
Let me know if we may assist you in some way
Ben0 -
What about Exchange and your current Outlook clients ? Are they using "basic" email features: sending/receiving emails and few more, or are they using "enhanced" features ( shared calendars, agendas, multiple email folder, public folders) and so on ?
I'm absolutely a supporter of Linux platforms but there's so much to do to have a real working environment if you want to replace a Windows Server system on certain enterprise companies.
I am not using an Exchange server, the clients are using Outlook to connect to Google Apps account. They mainly use email and the calendars so it shouldn't be an issue to transfer to Thunderbird.x11 app forwarding can be done through ssh, but you cannot forward the gui from windows based applications via ssh. Using local virtual machines would fulfill their needs, but it can become costly and can be abused by the users, which is why I recommend virtual terminal sessions. The price of a single instance of an OS and software along with a virtual terminal solution can be quite a bit cheaper and more secure.
What do you mean a virtual terminal solution? Will it run on the server and be accessed remotely by the clients?0 -
You're quite lucky Joe,
Migration shouldn't be a problem for you, you're not using outlook features specifically created for Exchange. Easy migration for you (at least for email functionalities)0 -
larynx wrote:
I am not using an Exchange server, the clients are using Outlook to connect to Google Apps account. They mainly use email and the calendars so it shouldn't be an issue to transfer to Thunderbird.
What do you mean a virtual terminal solution? Will it run on the server and be accessed remotely by the clients?[/quote]
Your current use of google apps will definitely make the transition easier.
By Virtual Terminal Solution I am referring to the capability to launch and application on a remote server that is streamed to your desktops by selecting a seemingly local applications on your computer. An example would be to see a quickbooks icon on your computer, when you launch it it would call out through lets say a citrix application to your citrix server telling the server to launch the application but display the windows and all output on your local computer. By using this solution you can roll out OS specific or mission critical applications to all users through a secure channel from a single system to users on all operating systems. By using citrix or another virtual terminal framework the users only see the windows from the specific application rather than having complete access to the desktop and all applications on the remote server.0 -
By Virtual Terminal Solution I am referring to the capability to launch and application on a remote server that is streamed to your desktops by selecting a seemingly local applications on your computer. An example would be to see a quickbooks icon on your computer, when you launch it it would call out through lets say a citrix application to your citrix server telling the server to launch the application but display the windows and all output on your local computer. By using this solution you can roll out OS specific or mission critical applications to all users through a secure channel from a single system to users on all operating systems. By using citrix or another virtual terminal framework the users only see the windows from the specific application rather than having complete access to the desktop and all applications on the remote server.
What are good applications for that? Are there any free (or cheap) ones? Would I be able to have several clients running remote applications (perhaps the same application) simultaneously?0
Categories
- All Categories
- 216 LFX Mentorship
- 216 LFX Mentorship: Linux Kernel
- 788 Linux Foundation IT Professional Programs
- 352 Cloud Engineer IT Professional Program
- 177 Advanced Cloud Engineer IT Professional Program
- 82 DevOps Engineer IT Professional Program
- 146 Cloud Native Developer IT Professional Program
- 137 Express Training Courses
- 137 Express Courses - Discussion Forum
- 6.1K Training Courses
- 44 LFC110 Class Forum - Discontinued
- 70 LFC131 Class Forum
- 42 LFD102 Class Forum
- 226 LFD103 Class Forum
- 18 LFD110 Class Forum
- 36 LFD121 Class Forum
- 18 LFD133 Class Forum
- 7 LFD134 Class Forum
- 18 LFD137 Class Forum
- 71 LFD201 Class Forum
- 4 LFD210 Class Forum
- 5 LFD210-CN Class Forum
- 2 LFD213 Class Forum - Discontinued
- 128 LFD232 Class Forum - Discontinued
- 2 LFD233 Class Forum
- 4 LFD237 Class Forum
- 24 LFD254 Class Forum
- 692 LFD259 Class Forum
- 111 LFD272 Class Forum
- 4 LFD272-JP クラス フォーラム
- 12 LFD273 Class Forum
- 137 LFS101 Class Forum
- 1 LFS111 Class Forum
- 3 LFS112 Class Forum
- 2 LFS116 Class Forum
- 4 LFS118 Class Forum
- 4 LFS142 Class Forum
- 5 LFS144 Class Forum
- 4 LFS145 Class Forum
- 2 LFS146 Class Forum
- 3 LFS147 Class Forum
- LFS148 Class Forum
- 15 LFS151 Class Forum
- 2 LFS157 Class Forum
- 23 LFS158 Class Forum
- 7 LFS162 Class Forum
- 2 LFS166 Class Forum
- 4 LFS167 Class Forum
- 3 LFS170 Class Forum
- 2 LFS171 Class Forum
- 3 LFS178 Class Forum
- 3 LFS180 Class Forum
- 2 LFS182 Class Forum
- 5 LFS183 Class Forum
- 31 LFS200 Class Forum
- 737 LFS201 Class Forum - Discontinued
- 3 LFS201-JP クラス フォーラム
- 18 LFS203 Class Forum
- 129 LFS207 Class Forum
- 2 LFS207-DE-Klassenforum
- 1 LFS207-JP クラス フォーラム
- 302 LFS211 Class Forum
- 56 LFS216 Class Forum
- 52 LFS241 Class Forum
- 48 LFS242 Class Forum
- 38 LFS243 Class Forum
- 15 LFS244 Class Forum
- 2 LFS245 Class Forum
- LFS246 Class Forum
- 48 LFS250 Class Forum
- 2 LFS250-JP クラス フォーラム
- 1 LFS251 Class Forum
- 150 LFS253 Class Forum
- 1 LFS254 Class Forum
- 1 LFS255 Class Forum
- 7 LFS256 Class Forum
- 1 LFS257 Class Forum
- 1.2K LFS258 Class Forum
- 10 LFS258-JP クラス フォーラム
- 118 LFS260 Class Forum
- 159 LFS261 Class Forum
- 42 LFS262 Class Forum
- 82 LFS263 Class Forum - Discontinued
- 15 LFS264 Class Forum - Discontinued
- 11 LFS266 Class Forum - Discontinued
- 24 LFS267 Class Forum
- 21 LFS268 Class Forum
- 30 LFS269 Class Forum
- 202 LFS272 Class Forum
- 2 LFS272-JP クラス フォーラム
- 1 LFS274 Class Forum
- 4 LFS281 Class Forum
- 9 LFW111 Class Forum
- 259 LFW211 Class Forum
- 181 LFW212 Class Forum
- 13 SKF100 Class Forum
- 1 SKF200 Class Forum
- 1 SKF201 Class Forum
- 795 Hardware
- 199 Drivers
- 68 I/O Devices
- 37 Monitors
- 102 Multimedia
- 174 Networking
- 91 Printers & Scanners
- 85 Storage
- 757 Linux Distributions
- 82 Debian
- 67 Fedora
- 16 Linux Mint
- 13 Mageia
- 23 openSUSE
- 148 Red Hat Enterprise
- 31 Slackware
- 13 SUSE Enterprise
- 353 Ubuntu
- 468 Linux System Administration
- 39 Cloud Computing
- 71 Command Line/Scripting
- Github systems admin projects
- 93 Linux Security
- 78 Network Management
- 102 System Management
- 47 Web Management
- 63 Mobile Computing
- 18 Android
- 33 Development
- 1.2K New to Linux
- 1K Getting Started with Linux
- 370 Off Topic
- 114 Introductions
- 173 Small Talk
- 22 Study Material
- 804 Programming and Development
- 302 Kernel Development
- 484 Software Development
- 1.8K Software
- 242 Applications
- 183 Command Line
- 3 Compiling/Installing
- 987 Games
- 317 Installation
- 93 All In Program
- 93 All In Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)