Hello all, I am battling with this problem and have not managed to figure out a away around it.

I have domain users logging into kde and also ssh access using there domain credentials without any problems, when they login they are created a home area on the Linux box and an symbolic link:

ln –s /mnt/home/$USER homearea

The /mnt/home/$USER is there H: drive on the windows network, which works fine if I mount the shared area via root access.

The only problem I have with issuing the command via root and using the admin credentials for my windows environment, is that all security rights on the folders after /mnt/home seems to just disappear and users then have potential access to the whole share /mnt/home and not just there $USER area.

Testaccount is a windows domain user accessing not only his potential home area but also that of other users.

testaccount@comp:/mnt/home> cd /mnt
testaccount@comp:/mnt> ls -la
total 1
drwxr-xr-x 3 root root 72 2005-11-01 17:54 .
drwxr-xr-x 22 root root 552 2005-11-04 23:50 ..
drwxrwxrwx 1 root root 0 2005-11-04 19:30 home
testaccount@comp:/mnt>

testaccount@comp:/mnt> cd home
testaccount@comp:/mnt/home> ls -la
total 0
drwxrwxrwx 1 root root 0 2005-11-04 19:30 .
drwxr-xr-x 3 root root 72 2005-11-01 17:54 ..
drwxrwxrwx 1 root root 0 2005-11-04 18:14 linuxuser
drwxrwxrwx 1 root root 0 2005-11-04 18:29 testaccount
testaccount@comp:/mnt/home>

Like I said this is the only area that is holding my back from deploying Linux workstations on our network, I must be missing something so simple, but just cannot find a solution!!!

Many Thanks

Chris

I'm no expert, but I believe that /etc/profile and /etc/bash.bashrc can be used to issue commands at login, so you can set the permissions on the folders to prevent snooping around by users.

The problem (as I see it) is that you're mounting the share using a Windows account that grants access to the entire branch. Access should be controlled at the server, not at the client.

Possible solutions

• Create separate Windows accounts and multiple mounts, one per user
• Use an NFS server (see diskless howto)
• Something using LDAP or Radius

As snowbat says it looks like you're mounting the directories as a user which has admin priveleges on the network - ie. root. If you try to mount the home directory as the user what happens? What's in the /etc/fstab file on these workstations? What about using the user and credentials mount options in fstab or in the mount command, ie. something like this: