Hello,
I am running into an issue with automount for user home directory running on Fedora Core 14 release.
I am using sssd.conf and that piece is working as I can query the user using ldapsearch, but what I can't figure out is how to get autofs to play with this new config.
I can't seem to find anything online for automount and sssd.con howto
Thanks!
---------- Post added at 03:13 PM ---------- Previous post was at 11:39 AM ----------
Interesting finding.... for my environment...!
Mod the following in /etc/sysconfig/autofs
# Other common LDAP nameing
#
#MAP_OBJECT_CLASS="automountMap"
#ENTRY_OBJECT_CLASS="automount"
#MAP_ATTRIBUTE="ou"
#ENTRY_ATTRIBUTE="cn"
#VALUE_ATTRIBUTE="automountInformation"
#
MAP_OBJECT_CLASS="automountMap"
ENTRY_OBJECT_CLASS="automount"
MAP_ATTRIBUTE="automountMapName"
ENTRY_ATTRIBUTE="automountKey"
VALUE_ATTRIBUTE="automountInformation"
#
-----------------
Mod the following file in /etc/sysconfig/authconfig
USEMKHOMEDIR=yes
USEPAMACCESS=no
CACHECREDENTIALS=yes
USESSSDAUTH=no
USESHADOW=yes
USEWINBIND=no
USEDB=no
FORCELEGACY=no
USEFPRINTD=no
FORCESMARTCARD=no
PASSWDALGORITHM=sha512
USELDAPAUTH=no
USEPASSWDQC=no
USELOCAUTHORIZE=yes
USECRACKLIB=yes
USEWINBINDAUTH=no
USESMARTCARD=no
USELDAP=yes
USENIS=no
USEKERBEROS=yes
USESYSNETAUTH=no
USESSSD=no
USEHESIOD=no
-------------------------------
Mod the following file in /etc/sssd/sssd.conf
[domain/LDAP]
id_provider = ldap
auth_provider = ldap
ldap_schema = rfc2307
ldap_uri = ldap://ldap.domain.com
ldap_search_base = dc=domain,dc=com
ldap_user_search_base = ou=people,ou=pam-ldap,dc=domain,dc=com
ldap_group_search_base = ou=group,ou=pam-ldap,dc=domain,dc=com
ldap_default_bind_dn = cn=pam-ldap-checker,ou=pam-ldap,dc=domain,dc=com
ldap_default_authok = ****
ldap_tls_reqcert = never
#cache_credentials = true
enumerate = true
* this setup seems to work for me... but I am having another issue now...
I am not able to login using my ldap account from my xsession. I am however able to do so if I login as a user, su - to root and then su - ldapuser account - this works....
Can't seem to find my problem on this yet...