[mdlug] pam_mkhomedir and NFS mounted home dirs

Michael ORourke mrorourke at earthlink.net
Mon Nov 29 22:54:52 EST 2010


Lug Nuts,

While setting up a LDAP server to authenticate user accounts, I decided to 
try and add a centralized NFS /home server too.  But when I added the 
pam_mkhomedir directive to the  /etc/pam.d/system-auth-ac file, the nfs 
mounted home dirs would get created as user nobody, which caused the 
directory to not be writeable by the user.  After a bit of digging, I found 
that if I changed the exported home filesystem attributes from root_squash 
to no_root_squash, then the home dir would get created with the correct 
ownership and the user could now write to their home directory.  However, 
for security reasons it is recommended that you do not mount the home 
directories with no_root_squash.  So my other work around was to not use 
pam_mkhomedir and just create the home directories on the nfs server at the 
same time I add an account in LDAP.
I'm curious if anyone else has run into this problem before?

-Mike 





More information about the mdlug mailing list