search for: mkhomedir

Hello everyone, I have a problem with oddjob_mkhomedir on a NFS mount point. The actual context is nfs_t drwxr-xr-x. root root system_u:object_r:nfs_t:s0 users/ With this type, oddjob_mkhomedir cannot do is job of creating home user directories. In the logs, I found about creating a new module with audi2allow and semodule: [root@ audit]# sea...

...t; you at home with a few servers? Then yeah I guess disabling it would be > the "quickest" route around this problem. On Sep 16, 2016 8:25 AM, Bernard > Fay <bernard.fay at gmail.com> wrote: > > > > Hello everyone, > > > > I have a problem with oddjob_mkhomedir on a NFS mount point. The actual > > context is nfs_t > > > > drwxr-xr-x. root root system_u:object_r:nfs_t:s0 users/ > > > > > > With this type, oddjob_mkhomedir cannot do is job of creating home user > > directories. > > > > In the logs,...

...rname wbinfo -u | grep username If all work and show your usename, then you should be able to login (sso) on ssh. If your users are only on this server and you dont need to share homedirs. Then you need mk_homedir in pam also. To enable, its simple on ubuntu/debian pam-auth-update --package mkhomedir pam-auth-update And enable mkhomedir ( you can use pam-auth-update --force also ) Greetz, Louis

I would like to set special permissions (ACL) when pam autocreates my home dirs in samba. I think i should use a script for that. My question is: how can I make pam run a bash script after it creates the homedir? Thanks Cristian

Does anyone have an example of this or a better explanation? I have Samba set up to authenticate to a Server 2003 AD and it seems to work great aside from this. I can create the folder manually, but that is the same as creating the user and I dont' want to do that for everyone already in the AD. Plus it is for a LTSP so it is only going to store home directorys on one server. Also how do I map

I inserted these directives template shell = /bin/bash and template homedir = /home/%U the in smb.conf. What command do you use to create the user with the relative home directory and shell? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 488 bytes Desc: OpenPGP digital signature URL:

Il giorno gio, 09/02/2017 alle 15.59 +0000, Rowland Penny via samba ha scritto: > You need to get use PAM for this, I think it is 'oddjob-mkhomedir' on > Centos > > Thank Rowland, but 'oddjob-mkhomedir' (and sssd) is already installed and with system login (su -, or ssh or login) work fine. My only problem is when access to server at the user home folder via client windows or smbclient, in this case the home dir is not...

...te: >> No, I can not log in as rommel.rodriguez and this user exist in the >samba4 ADDC. >> >Does the users home directory exist '/home/rommel.rodriguez' ? > >If it doesn't, you will need to use something to create it before the >user logs on, such as the PAM mkhomedir module. > >Rowland The home directories for this user not exist. I edit /usr/share/pam-configs/mkhomedir like this ?Name: Create home directory during login Default: yes Priority: 900 Session-Type: Additional Session: ???????required ???????pam_mkhomedir.so umask=0022 skel=/etc/skel b...

...ommel.rodriguez and this user exist in the >>> samba4 ADDC. >>> Does the users home directory exist '/home/rommel.rodriguez' ? >>> >>> If it doesn't, you will need to use something to create it before >the >>> user logs on, such as the PAM mkhomedir module. >>> >>> Rowland >> The home directories for this user not exist. >> >> I edit /usr/share/pam-configs/mkhomedir like this >> >> >> ?Name: Create home directory during login >> Default: yes >> Priority: 900 >> Sessi...

...reation also works. when i check the /var/log/messages i have this error in there 1.Jun 23 05:40:46 niit158VM pam_winbind[1696]: user 'linwin/zubair'granted acces 2.Jun 23 05:40:46 niit158VM pam_winbind[1696]: user 'linwin/zubair' granted acces 3.Jun 23 05:40:46 niit158VM PAM-mkhomedir[1696]: unknown option; /etc/skel/ 4.Jun 23 05:40:46 niit158VM -- LINWIN/zubair[1696]: LOGIN ON tty1 BY LINWIN/zubair now why is winbind being called twice?i have it only once in the authentication section of the login file. i do have it in others sections too. secondly why is it giving this un...

El 17 de septiembre de 2020 9:21:55 GMT-04:00, Rowland penny via samba <samba at lists.samba.org> escribi?: >On 17/09/2020 14:11, Rommel Rodriguez Toirac via samba wrote: >> *************************************** >> Hello Rowland; >> thanks for write me back. >> >> >> ?Now verifying that everything was fine: >> >> $ getent passwd

Hi all, I have a PC joined to an AD domain that authenticate users using pam_winbind module. I have set the option mkhomedir and all seems to works except that in the domain home folders are created? even home folders of the PCs. There is a way to instruct pam_winbind to create only user's home folders and don't create PC's home folders? Piviul

...nd to find the domain and check the necessary packages to be installed #realm discover tjsc.ad --client-software = winbind tjsc.ad type: kerberos realm-name: TJSC.AD domain-name: tjsc.ad configured: no server-software: active-directory client-software: winbind required-package: oddjob-mkhomedir required-package: oddjob required-package: samba-winbind-clients required-package: samba-winbind required-package: samba-common-tools I installed required packages # yum install oddjob-mkhomedir oddjob samba-winbind-clients samba-winbind samba-common-tools Includes server in the domain wi...

...rlier post) it doesn't seem to work at all, try > your setup with '[home]' and a path line. > > Rowland > Probably I misunderstand the above, but I can only say: we're on samba4.1.17, and on our fileserver we use this: > [homes] > root preexec = /usr/local/sbin/mkhomedir.sh %U > comment=Home directory for %S > read only = No > browseable = No > create mask = 0770 > directory mask = 0770 And this works as expected: the preexec runs, and the homes share gives us per user home folders. MJ

Hai Ian, Can you run this one again on both servers and pm me both outputs. I'll have a good look. https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh I've updated the file, so do use the new one. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ian > Coetzee via samba >

...Active Directory. The authentication is working great. The problem come up when a user gets an email and has not ever logged into the IMAP server via SSH, local, or GDM, therefore that user has no home directory. /etc/pam.d/ssh, /etc/pam.d/login, and /etc/pam.d/gdm all have a line calling mkhomedir.so, which is using the /etc/skel home directory skeleton to create the user's home dir upon successful login, however, when I add that line to /etc/pam.d/dovecot, I get a permission denied error in /var/log/maillog. I'm assuming this is because dovecot is running as the user at this...

...sername> show /home/users/<username> as home directory. And that's dir is create on login. Why it is use the path set on AD and not the path set in smb.conf ? grep home -r /etc/pam.d/ /etc/samba/smb.conf /etc/security/pam_winbind.conf /etc/pam.d/common-session:session optional pam_mkhomedir.so /etc/samba/smb.conf: template homedir = /home/%U /etc/security/pam_winbind.conf:# create homedirectory on the fly /etc/security/pam_winbind.conf:mkhomedir = yes I would prefer /home/%U at this client. Best regards,

On 19/06/2020 14:08, Fernando Gon?alves wrote: > Hello Rowland. Thanks for answering. Please post your present smb.conf Tell us what your AD DC's are. How did you join the domain ? Rowland

On a Centos 7 minimal fresh install I have follow this howto: http://www.hexblot.com/blog/centos-7-active-directory-and-samba and I have Joining to an Active Directory server without problem. The command "id administrator" work great, the home directory (/home/us er at srl) is successfully created if I run "su - user" or "ssh user at localhost" from a shell

...ple : !root = JEOFFICE\Administrator JEOFFICE\administrator Set this up for both servers.   Also, think about these to settings ( man smb.conf ) and optional apply them.     # enable offline logins     winbind offline logon = yes     #     winbind use default domain = yes # and small fix up in mkhomedir. echo "Name: Create homedir at login (mkhomedir) Default: yes Priority: 900 Session-Type: Additional Session:         optional pam_mkhomedir.so umask=0022 skel=/etc/skel " > /usr/share/pam-configs/mkhomedir   Run : pam-auth-update --package mkhomedir pam-auth-update     once done, on...