Re: [Freeipa-users] Problem automounting home shares

2017-04-14 Thread Ronald Wimmer
Here are my findings. The problem seems to be related to mkhomedir. By default my homedir looks like /home/%d/%u. In this case, when a user logs in for the first time /home/%d gets created and the %u part is missing. If I create it manually everything works fine. If i set override_homedir to /home

Re: [Freeipa-users] Problem automounting home shares

2017-04-14 Thread Ronald Wimmer
I got a little further. Now the share also automounts on the client with sec set to krb5 but the user still gets a "Permission denied" and cannot access his home directory. Can it be related to the fact that the user comes from AD? (Unfortunately, I cannot test with a native IPA user due to another

Re: [Freeipa-users] Problem automounting home shares

2017-04-14 Thread Ronald Wimmer
On 2017-04-13 14:24, Ronald Wimmer wrote: > [...] > It was my own fault. I somehow messed up the /etc/krb5.keytab on the > testclient. After correcting it everything works like a charm. No. It was notI was mistaken. The problem is: - sec=sys when I set sec=sys, the share gets automounted an

Re: [Freeipa-users] Problem automounting home shares

2017-04-13 Thread Ronald Wimmer
On 2017-04-13 12:47, Ronald Wimmer wrote: On 2017-04-12 17:21, Jason B. Nance wrote: [...] You can still use autofs and mkhomdir, just use a direct mount for /home instead of indirect mounts. In other words, mount "/home" entirely vs. "/home/" individually. Thanks for clarification. I made

Re: [Freeipa-users] Problem automounting home shares

2017-04-13 Thread Ronald Wimmer
On 2017-04-12 17:21, Jason B. Nance wrote: [...] You can still use autofs and mkhomdir, just use a direct mount for /home instead of indirect mounts. In other words, mount "/home" entirely vs. "/home/" individually. Thanks for clarification. I made a direct map for /home now that looks like:

Re: [Freeipa-users] Problem automounting home shares

2017-04-12 Thread Jason B. Nance
Hi Ronald, > Some details regarding my setup: I have a CentOS 7.3 machine acting as > an NFS server. It is a host within my IPA domain and enrolled as an IPA > client. > > [root@ipanfs ~]# cat /etc/exports > > /homeshare*(rw,sec=krb5:krb5i:krb5p) This isn't related to your issue but you hav

Re: [Freeipa-users] Problem automounting home shares

2017-04-12 Thread Jason B. Nance
>> You cannot use indirect mounting and enablemkhomedir at the same time. >> Indirect >> mounts require that the directory you are attempting to mount already exists >> on >> the NFS server and that you let autofs fully manage the "parent" directory on >> the client machine. In this case, no on

Re: [Freeipa-users] Problem automounting home shares

2017-04-12 Thread Ronald Wimmer
On 2017-04-12 14:55, Jason B. Nance wrote: [...] You cannot use indirect mounting and enablemkhomedir at the same time. Indirect mounts require that the directory you are attempting to mount already exists on the NFS server and that you let autofs fully manage the "parent" directory on the cli