Changes

From SME Server
Jump to navigationJump to search
1,931 bytes added ,  16:06, 11 September 2015
Line 5: Line 5:  
Christian Costa, Michael Doerner
 
Christian Costa, Michael Doerner
 
[http://www.technologywise.co.nz TechnologyWise]<br>
 
[http://www.technologywise.co.nz TechnologyWise]<br>
 +
[mailto:stephdl@de-labrusse.fr stephdl] Stéphane de Labrusse AKA [[User:stephdl|Stephdl]]<br />
    
=== Version ===
 
=== Version ===
Line 15: Line 16:     
=== Requirements ===
 
=== Requirements ===
*SME Server 7.X (also tested on SME8.0 latest beta)
+
*SME Server 8.X, 9.X
    
=== Installation ===
 
=== Installation ===
Line 70: Line 71:  
The first <volume user> directive will mount the user's (Windows) home drive on the local Linux workstation under a folder "win_home". The others will mount just those server shares only that the user, due to his group memberships does have access to.
 
The first <volume user> directive will mount the user's (Windows) home drive on the local Linux workstation under a folder "win_home". The others will mount just those server shares only that the user, due to his group memberships does have access to.
   −
Because this file is created on the fly with each user logon, a change in membership will have the same, immediate impact on the client site as it has for the user when he logs on to a Windows machine.  
+
Because this file is created on the fly with each user logon, a change in membership will have the same, immediate impact on the client site as it has for the user when he logs on to a Windows machine.
    +
 +
At the Linux client (only tested for Ubuntu yet):
 +
 +
(from our internal Wiki):
 +
 +
.. snip ..
 +
 +
Setting up pam_mount
 +
 +
pam_mount is a PAM module that can mount volumes for a user session. We're going to use it to mount the user's home drive and shares when he logs in. As for SME server, install the tw-logonscript package and things should work transparently.
 +
 +
As a superuser, create a file /etc/security/pam_mount.conf.xml with the following contents (be careful with line wraps!):
 +
 +
<?xml version="1.0" encoding="utf-8" ?>
 +
<!DOCTYPE pam_mount SYSTEM "pam_mount.conf.xml.dtd">
 +
<pam_mount>
 +
  <debug enable="0" />
 +
  <msg-authpw>Password:</msg-authpw>
 +
  <volume user="*" fstype="cifs" server="XXXXX" path="netlogon/users/%(DOMAIN_USER)" mountpoint="~/.netlogon" options="uid=%(DOMAIN_USER),workgroup=WNAME"></volume>
 +
  <luserconf name=".netlogon/.pam_mount.conf.xml" />
 +
  <logout wait="0" hup="0" term="0" kill="0" />
 +
  <mkmountpoint enable="1" remove="false" />
 +
</pam_mount>
 +
 +
You need to replace the server name (XXXX) and workgroup (WNAME) with your details.
 +
 +
=== Linux client mount point configuration ===
 +
 +
Configuration database settings are in:
 +
 +
config show twlogonscript
 +
 +
with the default settings as follows:
 +
 +
twlogonscript=configuration
 +
    MountPointsPath=/mnt
 +
    UserHomeMountPointName=user_data
 +
 +
To change the default mount for the various ibays to say a ''''network'''' directory in the users home directory, use:
 +
 +
config setprop twlogonscript MountPointsPath '~/network'
 +
 +
Similarly, configure a user '''home''' directory as follows:
 +
 +
config setprop twlogonscript UserHomeMountPointName home
 +
 +
Note that this home directory is mounted in the indicated '''MountPointsPath''' like in ''''~/network/home''''
    
=== Uninstall ===
 
=== Uninstall ===
Line 80: Line 128:  
Please raise bugs under the SME-Contribs section in [http://bugs.contribs.org/enter_bug.cgi bugzilla]
 
Please raise bugs under the SME-Contribs section in [http://bugs.contribs.org/enter_bug.cgi bugzilla]
 
and select the smeserver-tw-logonscript component or use {{BugzillaFileBug|product=SME%20Contribs|component=smeserver-tw-logonscript|title=this link}}
 
and select the smeserver-tw-logonscript component or use {{BugzillaFileBug|product=SME%20Contribs|component=smeserver-tw-logonscript|title=this link}}
 
+
{{#bugzilla:columns=id,product,version,status,summary |sort=id |order=desc |component=smeserver-tw-logonscript |noresultsmessage="No open bugs found."}}
 
----
 
----
 
[[Category:Contrib]]
 
[[Category:Contrib]]
 
[[Category:Administration:File and Directory Access]]
 
[[Category:Administration:File and Directory Access]]

Navigation menu