[Freeipa-users] mapping AD trust users to FreeIPA users for access to NFS w/ ACLs

2014-08-11 Thread Daniel Shown
I’m trying to get a client to respect an NFS4 ACL for a directory. I’ve got users in FreeIPA that match a subset of users in AD. The NFS server is a FreeBSD box that I’ve got config’ed to use FreeIPA as an LDAP service in nsswitch for providing uids. I use setfacl there with just the uid. The

Re: [Freeipa-users] mapping AD trust users to FreeIPA users for access to NFS w/ ACLs

2014-08-11 Thread Alexander Bokovoy
On Mon, 11 Aug 2014, Daniel Shown wrote: I’m trying to get a client to respect an NFS4 ACL for a directory. I’ve got users in FreeIPA that match a subset of users in AD. The NFS server is a FreeBSD box that I’ve got config’ed to use FreeIPA as an LDAP service in nsswitch for providing uids. I

Re: [Freeipa-users] mapping AD trust users to FreeIPA users for access to NFS w/ ACLs

2014-08-11 Thread Daniel Shown
grumble grumble. Do you know a bug ID or something similar i can search on? FWIW, FreeIPA server is CentOS 6.5, but the client is Ubuntu 14. Hopefully that makes a fix easier. :/ d:s === *Daniel Shown,* Linux Systems Administrator Advanced Technology Group

Re: [Freeipa-users] mapping AD trust users to FreeIPA users for access to NFS w/ ACLs

2014-08-11 Thread Alexander Bokovoy
On Mon, 11 Aug 2014, Daniel Shown wrote: grumble grumble. Do you know a bug ID or something similar i can search on? FWIW, FreeIPA server is CentOS 6.5, but the client is Ubuntu 14. Hopefully that makes a fix easier. :/ Here is the thread upstream, including the patch:

Re: [Freeipa-users] mapping AD trust users to FreeIPA users for access to NFS w/ ACLs

2014-08-11 Thread Daniel Shown
Hmm... yeah, I've mucked with idmap.conf and still no happiness. d:s === *Daniel Shown,* Linux Systems Administrator Advanced Technology Group Information Technology Services http://www.slu.edu/its at Saint Louis University http://www.slu.edu/. 314-977-2583

Re: [Freeipa-users] mapping AD trust users to FreeIPA users for access to NFS w/ ACLs

2014-08-11 Thread Jakub Hrozek
On Mon, Aug 11, 2014 at 10:04:37PM +0300, Alexander Bokovoy wrote: On Mon, 11 Aug 2014, Daniel Shown wrote: grumble grumble. Do you know a bug ID or something similar i can search on? FWIW, FreeIPA server is CentOS 6.5, but the client is Ubuntu 14. Hopefully that makes a fix easier. :/