Displaying 3 results from an estimated 3 matches for "someliteralgroupid".
2015 Nov 04
2
Pam_mount not working with "sec=krb5"
...ollowing volume definition in the
"/etc/security/pam_mount.conf.xml":
<volume fstype="cifs" server="server" path="home/%(USER)"
mountpoint="/home/%(USER)" sgrp="domain users"
options="sec=krb5,cruid=%(USERUID),uid=%(USERUID),gid=someLiteralGroupID,nosuid,nodev"
/>
But this wouldn't work initially, I got the
# mount error(126): Required key not available
However, once the respective user had logged in, I could use these
parameters for a manual mount as root:
# mount.cifs //server/home/userxyz /home/userxyz -o
sec=krb5,cruid=u...
2015 Nov 04
0
Pam_mount not working with "sec=krb5"
...nition in the
> "/etc/security/pam_mount.conf.xml":
> <volume fstype="cifs" server="server" path="home/%(USER)"
> mountpoint="/home/%(USER)" sgrp="domain users"
> options="sec=krb5,cruid=%(USERUID),uid=%(USERUID),gid=someLiteralGroupID,nosuid,nodev"
> />
>
> But this wouldn't work initially, I got the
> # mount error(126): Required key not available
>
> However, once the respective user had logged in, I could use these
> parameters for a manual mount as root:
> # mount.cifs //server/home/user...
2015 Nov 04
2
Pam_mount not working with "sec=krb5"
Am 04.11.2015 um 14:49 schrieb mathias dufresne:
> 2015-11-04 13:58 GMT+01:00 Ole Traupe <ole.traupe at tu-berlin.de>:
>
>> Mathias, thanks again! This sounds like a very reasonable approach. I know
>> that with remote ssh and public key authentication you can set the limit to
>> a single possible command. is this also possible with AD users?
>>
> I'm