Rob,

We did manage to figure out how to align autofs and automount properly on the 
enrolled host so that LDAP setup with those services are aligned with domain 
location-based server SRV records.

After enrolling the host with the domain, /etc/autofs.conf can be configured 
with the domain settings

# adding lookup_srv_rr enables SRV awareness in the autofs/automount relevant 
LDAP configuration
lookup_srv_rr = yes

# set the search bases specific to the automount location and domain
search_base = "cn=my_automount_loc,cn=automount,dc=idm,dc=domain”

# align autofs with the IPA schema
map_object_class = automountMap
entry_object_class = automount
map_attribute = automountMapName
entry_attribute = automountKey
value_attribute= automountInformation

Then enable ldap for automount in /etc/nsswitch.conf
automount: ldap files


Finally, configure a custom auto.master include file in 
/etc/auto.master.d/custom.master.autofs which has key and value (information) 
pairs similar to auto.master entry in the automount location (amloc specified 
in the searchbase of autofs) on the domain, for example:

/mnt auto.mnt
/home auto.home


Restarting autofs services was the last action to perform and the automounts 
specified in custom.master.autofs were accessible.

I will have to figure out how to submit a feature request; it would be nice if 
we were able to use an sssd.conf setting like ipa_automount_master = 
auto.master.custom to go along with ipa_automount_location to specify a custom 
default auto.master map entry in the designated automount location.


-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to