Hi,
Situation:
I want to create a new user on my local machine. This machine authenticates via ldap and krb5 severs of the institution, and it has home directories mounted via a nfs. Now the new user, say with id xyz, already has an entry in the ldap server. But he doesn't have a home directory created in the nfs server. So I want to create a home directory for xyz and export it to the local machine, so that next time xyz logs in the local machine he will redirected to his nfs home.

I logged in to the nfs server and checked xyz has id like this:
where 209228 is his id from ldap/krb5 and 810691 is his gid from ldap/krb5. Now if I lookup my id this what I get:
my real gid is same as ldap gid. (I am member of a special sudoers group, 199)
Question:
1. If I create a home directory named xyz with ownership specified to xyz (no gid specified), will xyz be able to log in via ldap/krb5 to this directory from local machine?
2. Do I need to create a directory xyz with permission specified by gid, so that when xyz logs on via ldap/krb5 he will have permissions on his home directory?
3. Do I need to create a local group for xyz on nfs server with gid same as ldap gid? Or somehow I need to add xyz to group 810691 on nfs server?

I could have experimented, but as you can guess, I do not have ldap password for xyz (and obviously I am not ldap admin). I only know my account credentials so cannot check if things worked, unless xyz tries to log in and complaints! So I am asking advice of the experts who can surely tel what to do!

Let me know if anymore details I need to give.
Thanks in advance,

Most LDAP servers are configured by the admin to allow for automatic creation of the users home directory (locally or NFS does not matter) on first login.

I would be very surprised if this were not the case, since the users home directory must be specified in the LDAP object.

1 members found this post helpful.

Thanks irishbitte!
But in this case, LDAP is used only for authentication. The universal home directories are listed in LDAP server; but I want them to log in to a local home directory. Rest of the users of that machine somehow do log in to a local home. I noted that all the user who log in to local home are member of a group called [829857(umg/dept.res.access.workstations)]. So I cross posted another question guessing that if I can change the local group of that LDAP user, then probably the user can log in to local home.
The cross post is here.
Thanks for replying there, too!

Sorry, if I misguided. Please let me know if I am wrongly interpreting the problem.

Thanks in advance,

[UPDATE -- Solved| I didn't have enough permission to add the user to the group specified. I had contacted LDAP admin and he did it all!]