[ubuntu] how to automount user home with Likewise Open?

[misterfriendly]

We have a Win 2008 R2 server providing AD & user home directories.

 

I have successfully joined an Ubuntu Desktop 10.04 box to AD using Likewise Open (this is stupidly easy) and network login works.

 

HOWEVER - by default, logging in as an AD user on the Ubuntu box creates a _local_ home directory for that user. That's not what I want - I want each user's network home (residing on the Win server) to be mapped to some local directory on login, so that they see all their expected files in ~/Documents, etc.

 

In other words, I want it to function like an AD-bound Mac when a network user logs in.

 

Has anyone done this? Online documentation is spotty and out of date (of course).

Thanks all -

 

Luke Jaeger | Technology Coordinator

Pioneer Valley Performing Arts Charter Public School

PVPA Charter Public School | South Hadley, Massachusetts - About PVPA

Edited July 27, 2012 by misterfriendly

[CyberNerd]

This may or may not be of use to you.

I'm using Centos clients here. Authentication is done through samba winbind and homedirectories are mapped using pam_mount.

The install is done remotely through kickstart (in spacewalk) and the config files are deployed through spacewalk.

my notes:

 

to setup for domain membership during kickstart:

install:

 

samba

samba-winbind

samba-client

pam_krb5

 

*pam_mount

 

during kickstart configure authconfig:

authconfig --enablewinbind --enablewinbindauth --smbsecurity ads  --enablewinbindoffline --smbservers=server1.domain.college.internal,server2.domain.college.internal --smbworkgroup=DOMAIN --smbrealm DOMAIN.COLLEGE.INTERNAL --winbindtemplatehomedir=/home/DOMAIN/%U --enablekrb5  --krb5realm=DOMAIN.COLLEGE.INTERNAL --enablekrb5kdcdns --enablekrb5realmdns --enablelocauthorize --enablemkhomedir --enablepamaccess --updateall --enablewinbindusedefaultdomain --krb5adminserver=SERVER1.DOMAIN.COLLEGE.INTERNAL,SERVER2.DOMAIN.COLLEGE.INTERNAL --winbindtemplateshell=/bin/bash --krb5kdc=SERVER1.DOMAIN.COLLEGE.INTERNAL,SERVER2.DOMAIN.COLLEGE.INTERNAL --update 

 

join domain:

#net ads join -u administrator

 

*additionally install pam_mount-2.5-1.fc12 as centos 6 lacks the package

 

upload the following to: /etc/security/pam_mount.conf.xml to client

 

 

upload the following to /etc/pam.d/password-auth-ac to client:

 

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth	    required	  pam_mount.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        sufficient    pam_krb5.so use_first_pass
auth        sufficient    pam_winbind.so cached_login use_first_pass
auth        required      pam_deny.so

account     required      pam_access.so
account     required      pam_unix.so broken_shadow
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     [default=bad success=ok user_unknown=ignore] pam_krb5.so
account     [default=bad success=ok user_unknown=ignore] pam_winbind.so cached_login
account     required      pam_permit.so

password    requisite     pam_cracklib.so try_first_pass retry=3 type=
password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtok
password    sufficient    pam_krb5.so use_authtok
password    sufficient    pam_winbind.so cached_login use_authtok
password    required      pam_deny.so

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     optional      pam_mkhomedir.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so
session optional pam_mount.so 
session     optional	  pam_krb5.so

[will_]

I wrestled with this for ages. I got it to automount shared mounts but I'm afraid I gave up on the home directory in the end. This was a couple of years ago so it may be easier now but I wouldn't hold your breath. Edited August 12, 2012 by will_
typo

[morganw]

I think that Centrify DirectControl Express has the option to mount the home folder you have set in AD, rather than use a local folder.