Displaying 4 results from an estimated 4 matches for "disablemkhomedir".
2019 Jun 11
2
AD authentication with separate LDAP authorization
...ystem)
- install packages samba, samba-client, samba-winbind,
samba-winbind-clients, and samba-winbind-krb5-locator
- net ads join -U 'user' (the domain allows non-admin creation of
machine accounts; net ads testjoin returns 'Join is OK')
- authconfig --enablesssd --enablesssdauth --disablemkhomedir --update
Here is the smb.conf with provisions for winbind (idmap lines), which
was (deliberately) not configured by authconfig above:
[global]
strict locking = no
workgroup = EXAMPLE
server string = Samba Server Version %v
disable netbios = yes
log file = /var/log/samba/log.%m...
2020 Jun 29
0
CentOS 8 - Fail to mount ${HOME}
...them, his home directory is mounted of the network.
When we tried to do this with CentOS 8, the user logs in but his home
directory was created locally on the machine.
- I have already disables this "nice" feature by running:
[root at lab_cnt08 ~]# *authconfig
--disablemkhomedir --update*
- Both CentOS 7 and CentOS 8 machines reside in the same domain.
Any thoughts or ideas would be appreciated.
Thanks,
*Yair Garfinkel*
2019 Jun 11
0
AD authentication with separate LDAP authorization
...kages samba, samba-client, samba-winbind,
> samba-winbind-clients, and samba-winbind-krb5-locator
> - net ads join -U 'user' (the domain allows non-admin creation of
> machine accounts; net ads testjoin returns 'Join is OK')
> - authconfig --enablesssd --enablesssdauth --disablemkhomedir --update
As you can join the machine to your AD domain, have you considered the
winbind 'rid' backend ?
Rowland
2019 Jun 12
0
AD authentication with separate LDAP authorization
...,
> > > samba-winbind-clients, and samba-winbind-krb5-locator
> > > - net ads join -U 'user' (the domain allows non-admin creation of
> > > machine accounts; net ads testjoin returns 'Join is OK')
> > > - authconfig --enablesssd --enablesssdauth --disablemkhomedir --update
> > As you can join the machine to your AD domain, have you considered the
> > winbind 'rid' backend ?
>
I am not aware of it or how it can help to solve this problem. Is there any
resource you can point to online that detail how to use this "rid" backend...