Editing Linux:Desktop Tips (section)

=== Network ===

==== Network shares ====
* <ins>Pre-requisite</ins>
: smb.conf - workgroup section, fill in your university/companies DOMAINNAME:
: <syntaxhighlight lang="bash">$ vim /etc/samba/smb.conf</syntaxhighlight>
: <syntaxhighlight lang="bash">[global]
workgroup = DOMAINNAME
</syntaxhighlight>

* <ins>Flavor 1</ins>
: With the file browser of your choice (Files, Nemo, Konqueror, etc.) type in the following line:
: <pre>smb://<company-smb-storage-fqdn>/<your>/<path></pre>
: When the login dialog appears, type in the following:
: <syntaxhighlight lang="bash">username: <yourUserId>
domain: <company-domain>
password: <yourpassword></syntaxhighlight>
: Hint: Add a bookmark in your favourite file browser for later access.

* <ins>Flavor2</ins>
: Mount your drive with the help of an entry in /etc/fstab
: {{syntaxhighlight|lang=bash|code=# <file system>                            <mount point>   <type>       <options>                           <dump>  <pass>
//<company-smb-storage-fqdn>/<your>/<path> /path/to/local/directory cifs credentials=/etc/smb.pass,uid=<youruid>,gid=<yourgid>,file_mode=0660,dir_mode=0770,noauto,users 0 0}}
: Hint: remove "noauto" to automatically mount your home-drive on startup, this is recommended only for desktops NOT laptops
: Secure the credentials file with:
: <syntaxhighlight lang="bash">chown <youruid>:<yourgid> /etc/smb.pass
chmod 600 /etc/smb.pass</syntaxhighlight>
: credentialsfile layout:
: <syntaxhighlight lang="bash">user=<yourUserId>
pass=<your-encrypted-password>
dom=<company-domain></syntaxhighlight>


* <ins>Flavor3</ins>
: Use an automounter. This can be for example autofs or systemd-automount.
: For systemd-automount we need an entry per mount in the /etc/fstab that looks like this:
: <pre>//<company-smb-storage-fqdn>/<your>/<path>    /path/to/local/directory    cifs        noauto,x-systemd.automount,x-systemd.device-timeout=10,x-systemd.idle-timeout=600,_netdev,noserverino,credentials=/etc/smb.pass,uid=<youruid>,gid=<yourgid>,file_mode=0644,dir_mode=0775    0 0</pre>
: Do not forget to create the mount point /path/to/local/directory. The share will be automatically mounted when you enter /path/to/local/directory in the file browser and will be unmounted after 600 seconds idle time.
: Create the file /etc/smb.pass and secure it in the same way as described in flavor 2
: When anything is changed in /etc/fstab we need to tell systemd about it:
: <pre>systemctl daemon-reload && systemctl restart remote-fs.target</pre>

==== Time sync ====
Most companies don't allow the standard time servers from the Fedora project as they have their own ones.
Therefore please add the following line(s) into your time sync config file
<pre>server <companies-ntp1-fqdn> iburst
server <companies-ntp2-fqdn> iburst</pre>
Ask your companies sysadmin gurus for the NTP FQDN details (!)
* Config files:
** For chronyd, use the file: /etc/chrony.conf
** For ntpd, use the file: /etc/ntp.conf
** For systemd-timesyncd, use the file: /etc/systemd/timesyncd.conf

* Restart the service to ensure the new settings
: <pre>systemctl restart chronyd</pre>
* and ensure the autostart (should be configured already)
: <pre>systemctl enable chronyd</pre>
: For ntpd and timesyncd the procedure works the same way ;-)

==== VPN ====
Your desired VPN setup is just a click away
* Workflow:
** Click on Settings → Network → VPN
*** Now hit the + button besides VPN
**** You can choose between openconnect(cisco/juniper/paloalto)/OpenVPN/PPTP/SSH and vpnc as shown in the slideshow below:
<gallery mode="slideshow">
File:network_vpn-access_1.png
File:network_vpn-access_2.png
File:network_vpn-access_3.png
</gallery>
:::: Ask your companies network gurus for the VPN FQDN connection details ;-)