On 21/07/16 15:19, Lars Behrens wrote: > Hi there, > > I am new to SL and this list, so I am not sure wether this is the right > place to ask: > > I just wanted to set up ldap-authentication with kerberos and pam_mount > of some cifs-Shares. Authentication works fine. But for the mount part, > I cannot find a pam_mount package, which bugs me a bit. > > Searching the net I found that for older versions of RH/CO-Versions a > pam_mount package existed. > > Can someone tell me, why there is none and what alternatives are there?
Have a look at authconfig and sssd. The former should help configure all these things for you, including proper PAM setup as well as LDAP and Kerberos. For SSSD it is in particular helpful on laptops, where authentication data can be cached locally to be capable of offline authentication as well as caching enough information to automatically fetch a Kerberos ticket once the network access has been established. And SSSD do have some support for handling the autofs/automount stuff too. Otherwise, do have a look at the FreeIPA stuff too. There's a lot of good things in that package, which also doesn't require much resources on the server side. For clients, it gets even easier. You just need to install the proper IPA packages and run ipa-server-install or ipa-client-install, that's mostly all you need. FreeIPA also makes use of SSSD and authconfig under the hood. -- kind regards, David Sommerseth
