Slashdot Mirror


First Alpha of Public Sector Linux Deployment System

New submitter mathiasfriman writes: SverigeLinux (SwedenLinux in Swedish) is a project financed by the Swedish Internet Fund that is developing a Linux deployment system for the public sector. It is based on DebianLAN and has just released its first public early alpha version. This 7 minute video shows how you can deploy up to 100 workstations with minimal Linux knowledge in under an hour, complete with DHCP, DNS and user data in LDAP, logins using Kerberos and centralized storage. The project has a home on GitHub and is looking for testers and developers. Don't worry, no Björgen Kjörgen; it's all in English.

84 comments

  1. That's nice by Anonymous Coward · · Score: 0, Troll

    I'll stick with Microsoft Active Directory.

    1. Re:That's nice by Anonymous Coward · · Score: 4, Insightful

      I'll stick with Microsoft Active Directory.

      Microsoft Active Directory is a bloated piece of bad software. Replication failures are common. Performance is dismal. Security is poor.

      Can someone tell me one advantage of Active directory? Anyone? Hello?

    2. Re:That's nice by mathiasfriman · · Score: 2

      You are in luck then, next issue up is integrating the clients in Active Directory via Realmd.

    3. Re:That's nice by Anonymous Coward · · Score: 0, Flamebait

      I'll stick with Microsoft Active Directory.

      Microsoft Active Directory is a bloated piece of bad software. Replication failures are common. Performance is dismal. Security is poor.

      Can someone tell me one advantage of Active directory? Anyone? Hello?

      Microsoft Active Directory provides scalable, reliable, secure, enterprise-ready solutions. Or should we say everything that the Linux flavor of the day does not.

    4. Re:That's nice by chipschap · · Score: 0

      Sounds like "he said - you said." Some actual facts would help the discussion.Buzzphrases like "bloated piece of bad software" on the one hand and "secure, enterprise-ready solutions" on the other, tell us nothing that can be used as the basis for a choice or decision.

      I know very little about Active Directory, but I'm willing to learn if something of substance could be presented.

    5. Re:That's nice by Anonymous Coward · · Score: 1

      the ONLY advantage of AD is that its a bit like oracle servers.... pre-installed in the company by some mindless bastard that came before you. So its impossible to rip out, without changing EVERYTHING. That is the only function of AD, incidentally it also does something with users and servers and shares... And theres nothing in linux world that does that just as easily, and that can be operated using cheap trained monekys, instead of specialists. that enough answer for you?

    6. Re:That's nice by Anonymous Coward · · Score: 1

      Microsoft Active Directory provides scalable, reliable, secure, enterprise-ready solutions.

      And high quality redundant risk management diversification tools, while we're spouting buzzwords.
      The bean counters will love hearing about risk management diversification tools.

    7. Re:That's nice by Teun · · Score: 1

      Yeah sure, but until it handles Linux it's fairly pointless to this discussion...

      --
      "The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."
    8. Re:That's nice by Dogers · · Score: 4, Informative

      I don't see how it can be called bloated, beyond the usual "ZOMG WINDOWS USES XXXXMB OF RAM LOLZZ" stuff.

      AD isn't just LDAP, it's a central store for everything management. Yes it holds your authentication details, but it also holds settings for (assuming you use the MS products) DHCP, DNS, Mail, etc. Want a new DC to avoid SPOF? Install Windows, install the role, promote. All the settings are copied down automatically and you're redundant. You've also got the concept of sites, which certain domain controllers handle, so workstations know where to find their local DC. Also, subdomains, so you can hand off sections of the environment to other people - think company divisions (dev.corp.net) or even countries (us.corp.net). It's all GUI and PowerShell controllable these days too.

      As for replication failures, yes they happen, as it will with anything that depends on replication. Disagree with them being common though - I've seen one in just over 15 years. We deleted the VM, made a new one on a new name, ran a clean up tool and carried on.

      --
      I am a viral sig. Please copy me and help me spread. Thank you.
    9. Re:That's nice by dbIII · · Score: 1, Insightful

      AD isn't just LDAP, it's a central store for everything management.

      Hence people calling it bloated. That's not a problem when you do want more than just LDAP but it is a valid description if you just want one little bit of what AD does.
      Same with MS Exchange, it's a huge suite and not just a mail transfer agent. If you want the suite, fine, it doesn't matter that it's huge.

    10. Re: That's nice by Anonymous Coward · · Score: 1, Insightful

      Platform integration, easy to set policies and security for pcs, users, groups, and locations. Easy to set up network printer access. Easy user configuration of exchange email and share point servers. Easy to setup patch and application management. The only operating system that did a better job was Novell Netware. Various Linux distros completely lack such ease of configuration and setup. There is no equal of exchange in the *nix environment period.

      I'm a big believer in using the right tool for job and there are many places where *nix works very well compared to Windows. But Linux fan boys have to get over the anti Microsoft attitude, it's played out.

      Any real administrator knows which OS to use for a particular function. And how to setup said OS to make it secure. You want *nix to takeover Microsoft Windows then create a replacement for exchange and office. Otherwise get real.

    11. Re: That's nice by Anonymous Coward · · Score: 0

      All of this is trivial to do with Linux, and probably easier too. It's also much more flexible.

    12. Re:That's nice by Dogers · · Score: 4, Insightful

      If people are just using it for LDAP, then they're doing it wrong :/

      Why not just use OpenLDAP or whatever in that case? The whole benefit of AD comes from putting everything in it. There's no masters or slaves, just two way replication partners.

      I understand the complaint about Exchange, but it is a HUGE system that can do a lot more than just MTA as you say.

      --
      I am a viral sig. Please copy me and help me spread. Thank you.
    13. Re:That's nice by rikkards · · Score: 3, Interesting

      I think he was talking about SMS and at least SCCM 2007. I work in a 100,000+ environment with over 300 DPs on varying links from fast to abysmally slow satellite and yeah package replication can be annoying. Usually have to refresh a couple DPs a month. Not a huge deal except when it is part of a task sequence and someone tries to migrate a couple hundred machines overnight.

    14. Re:That's nice by Kjella · · Score: 5, Insightful

      It's the best tool for the job if you want to run a Windows network? Seriously, it's not like you decide management tools and let your platform/applications revolve around that. This is the step after you've convinced everyone to give up Outlook/Exchange and Word, accounting to give up Excel, PHBs to give up Powerpoint, design/marketing to give up Photoshop and every other bit of Windows-only software they got and your server admins ask "So what's our replacement for AD?" and they're going to ask you if it has features X, Y and Z just like the others did.

      My guess is that every argument you just said will be met with a shrug and "It seems to work just fine for us, don't know what you're talking about. So how do we push a group policy to all clients in Linux?" and if your best answer is to write a script to ssh into each box and patch a configuration file they'll just roll their eyes and say "Linux does not have the necessary management features we need" and you've got one more group added to the list of migration opponents. Contrary to the *nix philosophy, I've yet to meet anyone happy to replace one tool with five, even if each is arguably a bit better. Swiss army knifes works quite well in the real world.

      --
      Live today, because you never know what tomorrow brings
    15. Re:That's nice by dbIII · · Score: 0

      The whole benefit of AD comes from putting everything in it

      That's what an internal web site is for but MS decided to do something slow and complicated so that you'd need more than the average high school graduate web monkey to keep track of it.

    16. Re:That's nice by Anonymous Coward · · Score: 0

      > Can someone tell me one advantage of Active directory? Anyone? Hello?

      Well, its acronym is M.A.D. which probably explains support's attitude -- what? me, worry?

      Hmm, on second thought, that is everyone's attitude.

    17. Re:That's nice by Anonymous Coward · · Score: 1

      At least under SCCM 2012R2 (which I've got deployed to about half your size), the distribution actually comes with monitors that tell you whether it has been successful or not.
       
      I rag on Microsoft a fair bit, but the software does do some things well - AD (actually, GP, LDAP alone does not an enterprise make), Excel, Exchange, SCCM is rapidly becoming the fan favourite where we are even though about 1/3 of our fleet is not-windows, taking the management of thousands of group policies for individual software installs away from me. It means we can be a lot more flexible with our deployments ( MDT a base, deploy to all machines either via MDT or SCCM depending on your boredom factor, let SCCM deployments and elective software sort itself out ).

    18. Re:That's nice by ruir · · Score: 0

      oh not, Linux is not enterprise ready, my god. What a lie. Lets conveniently ignore IBM provides Linux support, google and gmail are running on that, amazon too, and a lot of the word servers are run in the linux-based Amazon cloud. And to your information, vmware is just a souped up Linux kernel.

    19. Re:That's nice by Anonymous Coward · · Score: 0

      We are talking about workstation management, genius. Those are all server tasks you are talking about.

    20. Re:That's nice by Anonymous Coward · · Score: 1

      You can join a linux box to AD. Have been able to years.

      You can deploy and manage a linux box with SCCM.

    21. Re: That's nice by Anonymous Coward · · Score: 0

      And those workstations are...run and managed by servers. Turn your geek card in please. As you have no idea how computers work.

    22. Re: That's nice by Anonymous Coward · · Score: 0

      You are lying to yourself, saying your dick size is bigger than it is. Everything you stated can be done in Linux. You wouldn't know because you are obviously a Microsoft shill. Right tool for the right job my ass. More like right tool because your boss told you it was and you blindly believe him and spout off false shit he tells you to justify it.

      Stop pretending like you make the decisions. You just do what they tell you to do and keep quiet. Windows admins are a dime a dozen. We have too many of them, so keep following orders or get tossed out with the trash.

    23. Re:That's nice by goarilla · · Score: 2

      My guess is that every argument you just said will be met with a shrug and "It seems to work just fine for us, don't know what you're talking about. So how do we push a group policy to all clients in Linux?" and if your best answer is to write a script to ssh into each box and patch a configuration file they'll just roll their eyes and say "Linux does not have the necessary management features we need" and you've got one more group added to the list of migration opponents.

      You use a configuration management system (puppet,chef,cfengine,ansible). But yes AD is a very comprehensive suite of pre-selected tools known to work together.

    24. Re: That's nice by Anonymous Coward · · Score: 0

      Can you back up your argument a little better? How is *nix more flexible? How is setting policies and security easier with Linux than using one of Microsoft Admin tools?

      It maybe true that a Linux distro does the job better but how does it do it better? What is the *nix alternative to exchange? You are a little thin on details.

    25. Re: That's nice by Anonymous Coward · · Score: 0

      Ah yes when you have nothing to provide a counter argument with, you toss out the trusted and reliable "Microsoft shill" comment. And for added strength you also use an insult about the lacking length of someone's male genitals. Hopefully the original AC is a male otherwise that could make things a little uncomfortable.

      So does this mean I can pull out the all time classic:

      Please get out of your mom's basement. Stop relying on her to wash your clothes, warming up a hot pocket, and of course making her drive you to the mail. And for added strength, stop making her get your bath ready at the proper temperature so your precious skin doesn't burn.

      Have a nice day you big tough Linux Fan Boi

    26. Re:That's nice by Anonymous Coward · · Score: 0

      We are talking about workstation management, genius. Those are all server tasks you are talking about.

      Virtual machines or thin-clients are all that is necessary if you want simplified workstation deployment and management. Too bad Sun Microsystems and their SunRay Workstations are not around these days. Obviously they ran Sun Solaris.

    27. Re: That's nice by Anonymous Coward · · Score: 0

      My organisation still has an active SunRay deployment (that were working to get rid of at the moment) and it's hot garbage.

      SunRay was great for its time but it's been far surpassed by the likes of HP when it comes to thin clients.

    28. Re: That's nice by ruir · · Score: 1

      There are also many projects in Linux. No Machine (NX) was/is being used here in Portugal by large organisations to provide remote services to non-IT users. Many users did/do not enjoy it much due to being used to Windows, however the problems are much less and the costs are so much higher that higher management endorsed and mandated it.

    29. Re:That's nice by Anonymous Coward · · Score: 0

      I don't see how it can be called bloated, beyond the usual "ZOMG WINDOWS USES XXXXMB OF RAM LOLZZ" stuff.

      AD isn't just LDAP, it's a central store for everything management. Yes it holds your authentication details, but it also holds settings for (assuming you use the MS products) DHCP, DNS, Mail, etc. ....

      So... It's LDAP, DNS, SMTP/POP3, SAMBA/NFS, and NIS (or PAM)?

      It's been a little while since I've used all of those on Linux, but with projects like this and the popularity of RHEL and Ubuntu server, I'm pretty sure Linux isn't far off.

  2. Re:Mandatory comment by Anonymous Coward · · Score: 0

    All projects created with pubic service Linux are automatically over budget and late.

    Duh!

  3. Re:Mandatory comment by mathiasfriman · · Score: 1

    Since the swedish public sector software licensing costs are about $1bn annually, this project will always be underfunded...

  4. I like imaging systems like this, but... by Zombie+Ryushu · · Score: 1, Insightful

    I like imaging systems like this, but... It needs to be Distro Agnostic, as in just "An application." to deploy whatever Distro you have installed. As for LDAP, and Kerberos, Samba 4 plays a role here. Samba 4 is as much the next evolution of Heimdal Kerberos and OpenLDAP, as it is what Samba 3's "False Active Directories were, and everything OpenLDAP, and Heimdal provided, OpenLDAP and Heimdal clients should expect from Samba 4.

    The Fog Project seems to be a good model for this idea.

    1. Re:I like imaging systems like this, but... by mathiasfriman · · Score: 5, Informative

      First, this is not an imaging system, it's an install system which installs mainly Debian based distributions, based on Fully Automatic Installation (fai-project.org). FAI in turn is possible to use with multi-distribution capabilities to install CentOS, Scientific Linux and a few more. As a final twist, this project will also incorporate the possibility to install FOG servers but it is not our primary focus right now.

    2. Re:I like imaging systems like this, but... by Anonymous Coward · · Score: 0

      So, how's this SverigeLinux thing different from upstream FAI? Sounds like Debian plus some default configs. I've used FAI with both Debian and Ubuntu for many years (actually at a Swedish government institution) and your web site doesn't really explain what you're doing and how it improves what's already there.

    3. Re:I like imaging systems like this, but... by mathiasfriman · · Score: 4, Informative

      So, how's this SverigeLinux thing different from upstream FAI? Sounds like Debian plus some default configs. I've used FAI with both Debian and Ubuntu for many years (actually at a Swedish government institution) and your web site doesn't really explain what you're doing and how it improves what's already there.

      The FAI in SverigeLinux is the same as the FAI in Wheezy, what we've added is the config directory which installs OpenLDAP, Kerberos, centralized home directories mounted via NFS4 over kerberos, FusionDirectory for LDAP management of user-, DNS- and DHCP-settings, Icinga and Munin for monitoring, Roundcube for webmail, OwnCloud for cloud storage, dirvish for backup and some more stuff. The server can also replicate itself so that you can install an exact copy of the mainserver.
      The whole idea is that you won't need to spend a couple of months implementing the system with all these components, testing the setup and running into a myriad of problems before getting it right. It's just there from the beginning, tailored with your own domain name and your own IP-series if you so please. Think of it as the dcpromo of the Linux world, sort of. Please, feel more than free to contact me, if you're a long time FAI user we could definitely use your skills. :)

    4. Re:I like imaging systems like this, but... by Anonymous Coward · · Score: 0

      Ah, now that makes some sense.

    5. Re:I like imaging systems like this, but... by ruir · · Score: 1

      Preseeding is so much easier than FAI and seems less archaic, or so I think. Could you enlighten me in the advantages of FAI? (honest and sincere question here)

    6. Re:I like imaging systems like this, but... by mathiasfriman · · Score: 1

      We are looking into preseeding aswell, but the advantage with FAI is, I think, that it is more versatile. But it also has a higher learning threshold.

      The plan with this system is to offer a number of different ways to manage an infrastructure and FAI is one, preseeding is another, the foreman could be a third, even FOG or CloneZilla.. The important part is the infrastructure in the form of an LDAP-directory for e.g. DNS, DHCP and user data. We would like the users to have several options to choose from depending on background and preference. We'll see how that goes...

    7. Re:I like imaging systems like this, but... by turbidostato · · Score: 1

      "The plan with this system is to offer a number of different ways to manage an infrastructure and FAI is one, preseeding is another, the foreman could be a third"

      Remember the old saying "He that too much embraces, holds little."

      Despite of the risk of failing in your choosings (I for one have concerns on your choice on FAI), this is a project that is basically based on taking third party pieces and massaging and gluing to convince them to work together. Therefore I think, it's OK for the project to be strongly opinionated on how things need to be done, even more if the people working on it have the acumen and experience to (at least in general) choose the right tools and make them work together in a loosly coupled and modular way so each module can be exchanged for different ones.

      Being said that, it's also important to understand that it is probably impossible to find a single solution that fits any environment, so having different goals for different scenarios is also OK. In this regard, I remember an old Samba tutorial: they didn't set a single environment, but they went (more or less) deploying for a short office, then for a bigger office with branches, then for a big corporation with multiple divisions and mergers. While they built it so each tutorial built on the knowledge from the previous one, each had its own worthy differences.

      All in all, an interesting project, which I hope the best luck for.

    8. Re:I like imaging systems like this, but... by Anonymous Coward · · Score: 0

      Have you considered integrating with the free ipa project? It'll manage users in ldap(389) kerberos authentication, ntp, dns, in the same no-fuss way. Pretty sane out-of-box configuration last I checked, secure technologies, well maintained.

    9. Re:I like imaging systems like this, but... by ruir · · Score: 1

      Here I installed preseeding+ansible and only for servers. The preseeding part is also becoming obsolete as I moved everything to our private cloud.

    10. Re:I like imaging systems like this, but... by turbidostato · · Score: 1

      "First, this is not an imaging system, it's an install system which installs mainly Debian based distributions, based on Fully Automatic Installation (fai-project.org)."

      How is this different, then, to Debian Edu? (forget about the fact of "Edu" on its name).

      It also aims for a centralized Debian environment, imaging system, centralized configurations, etc. and it's, of course, since it's been in development for some few years, much more mature than your project.

    11. Re:I like imaging systems like this, but... by mathiasfriman · · Score: 1

      Right now, it's not many things that differ, other than that you can choose domain name and IP-series for your self. However, we aim to cater for the needs of the swedish public sector which is built using about 100% Microsoft products on the operating system side of things. Therefore we will implement things like citrix clients, the ability to automate creating virtual machines for Windows images and having the Linux-system communicate with it using seamless RDP, a bit like bootcamp.

      Another thing we are building now is a standardized way for OpenIDM to handle identity management and synchronization of accounts between AD and OpenLDAP.

      Using SverigeLinux we can also deploy ElementaryOS and Ubuntu, which I think is a good thing. Deployment profiles to integrate Ubuntu workstations into an AD-environment using Realmd is also in the pipeline to be implemented.

      But of course, we cannot compete with DebianEdu when it comes to maturity of code. We don't intend to either, rather I would like to work together as much as possible with existing projects.

    12. Re:I like imaging systems like this, but... by goarilla · · Score: 1

      What do you actually monitor with icanga and munin ?

    13. Re:I like imaging systems like this, but... by Zombie+Ryushu · · Score: 1

      Now I see. Does your OpenLDAP installation use the smbk5pwd.so module to Sync LDAP and Kerberos?

  5. Re:Mandatory comment by Noughmad · · Score: 1

    All projects are automatically over budget and late.

    FTFY

    --
    PlusFive Slashdot reader for Android. Can post comments.
  6. Roger. We have full FOC on all underbelly systems by golodh · · Score: 2
    Thanks for that. This "mandatory" post shows FOC (Full Operational Capability) on all US intellectual underbelly feelings.

    Apart from that, this seems the sort of project you didn't know you needed until you've seen it done.

    How much time do admins, consultants, and contractors waste by re-inventing the wheel when planning, building, and rolling out the umpteeth networked computing infrastructure ?

    What's there in the public domain is a jumble of howto's, forums, bits of disjunct knowledge and learning opportunities that one may (over the course of a few years) learn one's way in to become an admin who's able to design an roll out a decent piece of infrastructure.

    This is one of the reasons why companies may decide to go with e.g. Microsoft. Less uncertainty in terms of price and ability to meet delivery deadlines. Simply because the people who design and implement the stuff have had time to learn from their wost mistakes, as opposed to the average Linux enthusiast (a definite no-go) or even contractors that set up Linux-based infrastructures (you can bet they use non-standard setups, non-standard tooling, and leave you with a system you probably need them for to maintain efficiently).

    This project on the other hand seems to give admins a head-start in implementation and it can serve as a repository of practical know-how.

  7. Cool by dannybackx · · Score: 2

    This kind of stuff makes it easy to set up a whole company infrastructure quickly

  8. Unintentional joke above by dbIII · · Score: 3, Insightful

    Less uncertainty in terms of price

    I'm sorry, but you got me laughing at this point. Have you looked at MS server licencing at all? There's a good reason that there's a third party "for dummies" book.

  9. Great! Minimal knowledge is just what we seek! by Anonymous Coward · · Score: 1

    Is it usually a good idea to have a person with minimal knowledge of what they are doing rolling out a couple of 100 machines?

    1. Re:Great! Minimal knowledge is just what we seek! by wertigon · · Score: 1

      Of course it is!

      How else do you expect us $100/hour consultants to get any job opportunities?

      *Walks off to buy his third solid gold Humvee*

      --
      systemd is not an init system. It's a GNU replacement.
    2. Re:Great! Minimal knowledge is just what we seek! by Blaskowicz · · Score: 1

      It may be easier to admin a system than to set it up. e.g. writing your own script for user creation is too hard (and will have you ssh in as root, unless you can also build a secure web interface around it).
      Worse, you could have a try and get it wrong in a subtle way.. but leaving that to someone else, you might be competent enough to admin the user accounts, the dhcp, cups, the proxy.., troubleshooting issues.

    3. Re: Great! Minimal knowledge is just what we seek! by Anonymous Coward · · Score: 0

      If you are logging into ssh as root you are doing something very wrong.

    4. Re: Great! Minimal knowledge is just what we seek! by Blaskowicz · · Score: 1

      not if I set the password as "r00t" so that the bad guys won't guess.

  10. Re:Roger. We have full FOC on all underbelly syste by Anonymous Coward · · Score: 5, Interesting

    ..This is one of the reasons why companies may decide to go with e.g. Microsoft. Less uncertainty in terms of price and ability to meet delivery deadlines..

    For your consideration, I was going to present you with a breakdown of the IT structure in place at my current place of employ, alas, I can't be bothered, I've heard all this crap before and am tired trying to explain why it's so wrong.
    Our main IT system is all Microsoft based, all set up by highly paid external certified consultants, and isn't worth shit, trying to detail all the fuckups they've had with it would take pages, suffice to say, the bit that I really, really have to laugh at was your '..Less uncertainty in terms of price and ability to meet delivery deadlines.' bit. None of their planned upgrades of the servers and desktops have run smoothly, to budget, or to schedule. My particular sections planned upgrade is now 6 months behind 'deadline'..

    ..Simply because the people who design and implement the stuff have had time to learn from their wost mistakes, as opposed to the average Linux enthusiast (a definite no-go) or even contractors that set up Linux-based infrastructures (you can bet they use non-standard setups, non-standard tooling, and leave you with a system you probably need them for to maintain efficiently).

    Wait, what? seriously?, It's really sad that you seem to believe all that is true..in my 20+ years experience the biggest bunch of shyster-hucksters I've come across in the IT world are MCxx qualified consultants, I really shouldn't complain though, I managed to make quite a bit by fixing their mistakes...not bad, then again, I'm probably not your 'average Linux enthusiast'.

    Contractors, whatever flavour of system they're setting up, Linux or otherwise, are usually bad news. If a company has gone down the 'let's employ externals to implement our IT' it means either the management are technophobes, or they don't trust their own IT people, in which case, the contractors know this and have a license to print money by installing the most borked setups imaginable (I should know, I've had to untangle quite a few 'job creation schemes' from setups over a couple of decades..I'm currently watching an experienced Windows guy trying to unravel such a setup now, he's been at it for a couple of months..a complete reinstall is not an option)

    Do you know what's most annoying about the above?, most of the people I've known in the past who've run Linux/Unix servers have all supported their corporate windows servers as well (myself included). We may be, as you put it, 'Linux enthusiasts', this doesn't mean we've never seen (or had to fix/work around) the 'worst mistakes' of borked windows systems.
    You know you're in for a fun day when you pop open a cmd window on a Win2k3 server in front of its admin and run something with command line switches he never knew existed..and I'm not even doing IT support as a job these days..

  11. Nice by Anonymous Coward · · Score: 0

    I disagree with the MS AD bashing here. Its a very well grounded bit of kit, and the reason its widely used is not an accident.

    In terms of this project - very nice. Look forward to seeing it get through alpha, beta and then solidify. One of the interesting issues that I see real world is that Linux may have the tooling, but hasn't really had a well defined system that provides the answers, easy to run and manage, client and application support in a way this project seems to outline.

    There has always seemed to me, and I may be wrong here, a lot of efforts exist, but few get as clearly defined as this one is lined up to be. Despite likeing AD, I'd really like there to be a full stack, well thought out, easy to run and manage OSS full stack to compete and use in similar space to AD.

  12. ltsp by Anonymous Coward · · Score: 0

    and what was the problem with LTSP, local apps, and 4-5 servers mush much cleaner

  13. Sverige...GNU/Linux!? by Anonymous Coward · · Score: 0

    This project has been badly named. Please rename it to correct the situation

  14. Re:Roger. We have full FOC on all underbelly syste by JaredOfEuropa · · Score: 4, Interesting

    Interestingly, your point about consultants and developers having had the time to learn from their mistake was a point made against MS not that long ago. MS switched their technologies and APIs so fast that developers had at best a few years of experience, since that's how long each iteration lasted. In contrast, a lot of stuff I picked up about X11 in the 90s is still valid.

    Open source can be a bit of a jumble. We have had some experience with solutions based on a number of FOSS products working together (in many cases, one has to rely on additional modules or bits of software written by different communities). Which is fine until one of those products is no longer being developed further. Your NTLM-based SSO module doesn't work with the Kerberos based system the company is switching to, and the devs have long gone. But that doesn't really have to be a problem. If you know you'll have to replace a FOSS component, you start looking for a replacement. Worst case scenario: you pay someone to develop a new version for you, which rarely is a major effort. It's a problem when it is a surprise and it breaks things. Because then the responsible manager does not have a vendor to shout at.

    That ties in to the cost element as well. Estimating price and timelines for MS-based projects is reasonably well understood and not more inaccurate than in other projects, in my experience. But to what degree do you favour predictability over a (much) lower cost? As an example: Sharepoint.
    My client (a large multinational) rolled out Sharepoint and is gradually replacing other systems with it: document management, team collaboration spaces, web content management, discussion forums, and the company Wiki. Some of the software SP is replacing was over 15 years old, but it had some good qualities: it was designed to scale up as well as down, to run in a multi-tiered organisation with delegated administrative responsibilities, and though (or because) it was not all-singing-all-dancing web 3.0 ultra-integrated software, it performed well with a minimum of maintenance and ran on pretty light hardware. TCO was low, and most change requests could be executed on the cheap as well.

    Now there is Sharepoint. The cost of implementation (including migration from the older platforms) would feed a small nation for a year. It requires much beefier hardware and an army of consultants: lift a floor tile in any of the datacenters and you'll see a few Sharepoint guys scuttle off. Maintenance is at least an order of magnitude more expensive. And functionally, it only offers the very barest of any of the solutions it replaced. What it does do well is integration between functions and with Office, and workflow... but compared to all the other stuff, I consider those to be nice-to-haves.

    There's the problem: Sharepoint was too easy a choice for management. A one stop shop, well understood cost structure, a traditional big iron approach to run the project, and someone to blame when things go south. And the sexy integration with Office of course. However, if they would have looked into FOSS solutions for CMS, Forums, Wikis and team sites, and selected a tried and true document management system from a vendor who knows what document management is, they would have saved time, saved a ton of money, had less disappointment and frustration from the rank-and-file, and enjoyed a much lower TCO. What they would miss is integration between all of these functions, but you know what? They are not that important.

    --
    If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
  15. Can you post news without etnocentrism, please ? by Anonymous Coward · · Score: 0

    Can we keep it news for nerds, not news for bigots? Thank you.

    "Don't worry, no Björgen Kjörgen; it's all in English."

    Nobody outside your psicotic circles worries about the richness of humanity having more languages than just English. Why should anyone think a Swedish project for the public institutions of Swedish people should use Swedish as language ? (and/or Finnish, I'm not very aware of issues there). Because the few Englishfolk and the most English as second language or other English variations natives think the whole world should summit to their oligolinguism so thoroughly than the mere thought of people doing projects in their own languages would "worry" them ?

    Frankly, I can see merit in people caring that technology, free software or STEM somehow excludes half of the population for such a silly reason as being female.
    But someone could start worrying about the same field and others excluding 92 % of people who don't speak English (or 95% don't do it as well as natives). And I know you can learn many languages but can't/shouln't have to change gender so easily, right.

    If more free software projects would use Swedish, Croatian or Amazic, it would just be more reasons for me to learn more languages, not something to worry about!

    Slashdot is an English speaking forum. Allright. But pretending the use of other languages may be worrisome is offensive even to most English monolinguals, I belive.

  16. unite the sockpuppet clan! by Anonymous Coward · · Score: 0

    you can't post a linux story w/o Microsoft posts. You can't post other stories without a Microsoft Story filled with happy people clapping hands and blowing bubbles up your ass.

  17. Re:Can you post news without etnocentrism, please by mathiasfriman · · Score: 2

    I'm not sure who you take a swing at here, but the decision to make this an english "product" at this stage is because we thought it would appeal to a larger crowd. If you want some swedish to sift through I can throw in the project description for good measure:

    https://www.internetfonden.se/...

    Also, it is quite trivial to add multilingual support to the parts that matter. Most of the documentation that I'm writing for the system is however in swedish for this first phase of the project.

  18. The real question is: by CurryCamel · · Score: 2

    If I'd happen to work in the Swedish puvblic sector, what I'd want to know first is:
    does it run systemd?

  19. A duplication of effort by bindlestiff · · Score: 0

    This sounds like a severe case of "Not Invented Here" syndrome. We already have a fantastic image archival and replication system in http://clonezilla.org/ , any budding developers would better serve by contributing to the various projects that make it up.

    1. Re:A duplication of effort by mathiasfriman · · Score: 2

      I didn't know CloneZilla had centralized user management and data storage as well as DNS, DHCP services?

  20. Re:Can you post news without etnocentrism, please by turbidostato · · Score: 2

    ""Don't worry, no BjÃrgen KjÃrgen; it's all in English."

    Nobody outside your psicotic circles worries about the richness of humanity having more languages than just English."

    I do.

    It could probably been said in a more "politically correct" way and, me myself being Spanish, have my own concerns about English being the "common trade" language of the world (as it has been French, German, Spanish, Latin... in the past), but I applaud the project being set in English instead of Finn, since it'll reach a greater audience (me, for one). Using English is not so Americans can benefit of it, but in order for everybody to do so.

  21. Re:Roger. We have full FOC on all underbelly syste by Hognoxious · · Score: 1

    Technically speaking, if you're 100% sure in advance that they're going to fuck up then that is less uncertain.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  22. Re:Can you post news without etnocentrism, please by Hognoxious · · Score: 1

    German? When was that?

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  23. Github pages aren't ready by Anonymous Coward · · Score: 0

    Github pages aren't ready.

    No README, No LICENSE.

    1. Re:Github pages aren't ready by mathiasfriman · · Score: 1

      Here are some of them: https://github.com/SverigeLinu...

      Where exactly are you missing them?

  24. Re:Can you post news without etnocentrism, please by turbidostato · · Score: 1

    "German? When was that?
    Reply to This"

    Are you trolling or asking in good faith?

    In case it's the lattest, go please check what was the language science, both pure and applied, and engineering was written on along the second half of XIX century up to World War II.

  25. Re: Roger. We have full FOC on all underbelly syst by Anonymous Coward · · Score: 0

    We took sharepoint into use few years ago. Now we are replacing it with oss solution.

  26. Re:Can you post news without etnocentrism, please by Hognoxious · · Score: 1

    I'm perfectly aware of German's position in science, thank you very much. Your assertion was that German was the common language of trade. Outside a small time frame in the Baltic, that's simply untrue.

    Oh, and bullshit on Latin too. Unless by "world" you mean Western Europe and half the Med.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  27. Re:Can you post news without etnocentrism, please by Anonymous Coward · · Score: 0

    Oh, so you ARE tolling. Good to know,

  28. Re:Can you post news without etnocentrism, please by Hognoxious · · Score: 1

    Correcting fat idiots when they spout shit is not trolling.

    WTF is "etnocentrism", by the way? Something to do with volcanoes?

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."