In case you are using kerberized NFS4, make sure that in your /etc/exports file on your NFS server security is set to sys. In my setup, that was the only option worked (for mkhomedir):

#cat /etc/exports
/export/home  192.168.161.0/24(rw,sec=sys:krb5p,no_root_squash)

Petros

On 01/31/2018 07:36 PM, Kristian Petersen wrote:
Yes it is being exported via NFS.

On Wed, Jan 31, 2018 at 9:51 AM, Petros Triantafyllidis <tr...@auth.gr <mailto:tr...@auth.gr>> wrote:

    Is your home directory exported as NFS? As far as I remember there
    are some differences between CentOS 6 and 7 regarding NFS versions
    that might affect you.

    Petros



    On 01/31/2018 06:30 PM, Kristian Petersen via FreeIPA-users wrote:
    Update: I was putting together another client for a separate
    purpose that runs RHEL 6 instead of RHEL 7 and everything
    worked.  So there must be something different between RHEL6 and
    RHEL7 that causes the steps I am using to fail on RHEL7.

    On Mon, Jan 29, 2018 at 4:37 PM, Kristian Petersen
    <nesre...@chem.byu.edu <mailto:nesre...@chem.byu.edu>> wrote:

        I think it is trying to write a lock file related to the X
        session to my home directory, but it can't because the
        location doesn't exist.  Interestingly enough, I tried
        creating the directory manually and I get "permission denied"
        even if running as root.  Could this be a problem related to
        IPA trying to automount home directories?

        On Mon, Jan 29, 2018 at 2:56 PM, Jeff Goddard
        <jgodd...@emerlyn.com <mailto:jgodd...@emerlyn.com>> wrote:

            My servers are centos but here is the script we run.

            CENTOS

            authconfig --enableldap \
            --enableldapauth \
              --ldapserver=servername.internal.com 
<http://servername.internal.com>  \
            --ldapbasedn="cn=users,cn=accounts,dc=internal,dc=com" \
            --enablemkhomedir \
            --update


            On Mon, Jan 29, 2018 at 4:51 PM, Kristian Petersen
            <nesre...@chem.byu.edu <mailto:nesre...@chem.byu.edu>> wrote:

                Oddjobd is installed and is enabled and running at
                least.  Where would you configure it that I could check?

                oddjobd.service - privileged operations for
                unprivileged applications
                  Loaded: loaded
                (/usr/lib/systemd/system/oddjobd.service; enabled;
                vendor preset: disabled)
                  Active: active (running)since Mon 2018-01-29
                12:43:23 MST; 44min ago
                Main PID: 1683 (oddjobd)
                  CGroup: /system.slice/oddjobd.service
                          └─1683 /usr/sbin/oddjobd -n -p
                /var/run/oddjobd.pid -t 300


                On Mon, Jan 29, 2018 at 1:25 PM, Jeff Goddard
                <jgodd...@emerlyn.com <mailto:jgodd...@emerlyn.com>>
                wrote:

                    Sounds like oddjobd isn't installed/configured.

                    On Mon, Jan 29, 2018 at 3:23 PM, Kristian
                    Petersen via FreeIPA-users
                    <freeipa-users@lists.fedorahosted.org
                    <mailto:freeipa-users@lists.fedorahosted.org>> wrote:

                        I am trying to set up a workstation running
                        RHEL 7 with Gnome graphical environment. I
                        have enrolled this machine as a client in IPA
                        using the --mkhomedir flag, however, the home
                        directory is not being created when I log in.
                        Because the home directory doesn't get
                        created at log in GDM kicks me back out to
                        the log in screen after authenticating
                        properly.  I also ran authconfig --mkhomedir
                        update. Thoughts?

-- Kristian Petersen
                        System Administrator
                        Dept. of Chemistry and Biochemistry

                        _______________________________________________
                        FreeIPA-users mailing list --
                        freeipa-users@lists.fedorahosted.org
                        <mailto:freeipa-users@lists.fedorahosted.org>
                        To unsubscribe send an email to
                        freeipa-users-le...@lists.fedorahosted.org
                        <mailto:freeipa-users-le...@lists.fedorahosted.org>









-- Kristian Petersen
                System Administrator
                Dept. of Chemistry and Biochemistry









-- Kristian Petersen
        System Administrator
        Dept. of Chemistry and Biochemistry




-- Kristian Petersen
    System Administrator
    Dept. of Chemistry and Biochemistry


    _______________________________________________
    FreeIPA-users mailing list --freeipa-users@lists.fedorahosted.org
    <mailto:freeipa-users@lists.fedorahosted.org>
    To unsubscribe send an email tofreeipa-users-le...@lists.fedorahosted.org
    <mailto:freeipa-users-le...@lists.fedorahosted.org>




--
Kristian Petersen
System Administrator
Dept. of Chemistry and Biochemistry

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to