[mdlug] pam_mkhomedir and NFS mounted home dirs
Michael ORourke
mrorourke at earthlink.net
Mon Nov 29 22:54:52 EST 2010
Lug Nuts,
While setting up a LDAP server to authenticate user accounts, I decided to
try and add a centralized NFS /home server too. But when I added the
pam_mkhomedir directive to the /etc/pam.d/system-auth-ac file, the nfs
mounted home dirs would get created as user nobody, which caused the
directory to not be writeable by the user. After a bit of digging, I found
that if I changed the exported home filesystem attributes from root_squash
to no_root_squash, then the home dir would get created with the correct
ownership and the user could now write to their home directory. However,
for security reasons it is recommended that you do not mount the home
directories with no_root_squash. So my other work around was to not use
pam_mkhomedir and just create the home directories on the nfs server at the
same time I add an account in LDAP.
I'm curious if anyone else has run into this problem before?
-Mike
More information about the mdlug
mailing list